Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
References
Link | Resource |
---|---|
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt | Broken Link |
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt | Broken Link |
Configurations
Configuration 1 (hide)
|
History
27 Mar 2025, 15:04
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt - Broken Link | |
CPE | cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:-:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:cumulative_hotfix_patch_6:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:-:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_2:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:cumulative_hotfix_patch_5:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_4:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_3:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:cumulative_hotfix_patch_2:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.12.0:*:*:*:*:*:*:* |
|
First Time |
Arubanetworks
Arubanetworks clearpass Policy Manager |
21 Nov 2024, 09:02
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt - |
01 Aug 2024, 13:48
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-77 |
28 Feb 2024, 14:06
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
27 Feb 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-02-27 22:15
Updated : 2025-03-27 15:04
NVD link : CVE-2024-26294
Mitre link : CVE-2024-26294
CVE.ORG link : CVE-2024-26294
JSON object : View
Products Affected
arubanetworks
- clearpass_policy_manager
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')