CVSS 8.8 · High EPSS 0,92%
Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada arubanetworks clearpass policy manager. Skor CVSS 3.1 8.8 (High) menurut NVD.
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| arubanetworks | clearpass policy manager | Versi 6.9.0 hingga sebelum 6.9.13 |
| arubanetworks | clearpass policy manager | Versi 6.10.0 hingga sebelum 6.10.8 |
| arubanetworks | clearpass policy manager | Versi 6.11.0 hingga 6.11.6 |
| arubanetworks | clearpass policy manager | Versi 6.9.13 |
| arubanetworks | clearpass policy manager | Versi 6.9.13 cumulative_hotfix_patch_2 |
| arubanetworks | clearpass policy manager | Versi 6.9.13 cumulative_hotfix_patch_3 |
| arubanetworks | clearpass policy manager | Versi 6.9.13 cumulative_hotfix_patch_4 |
| arubanetworks | clearpass policy manager | Versi 6.10.8 |
| arubanetworks | clearpass policy manager | Versi 6.10.8 cumulative_hotfix_patch_2 |
| arubanetworks | clearpass policy manager | Versi 6.10.8 cumulative_hotfix_patch_5 |
| arubanetworks | clearpass policy manager | Versi 6.10.8 cumulative_hotfix_patch_6 |
| arubanetworks | clearpass policy manager | Versi 6.12.0 |