VYPR
← All advisories
High severity7.2NVD Advisory· Published May 17, 2022· Updated Jun 17, 2026

CVE-2022-23672

CVE-2022-23672

Description

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.

Affected products

6
  • Arubanetworks/ClearPass Policy Manager5 versions
    cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*range: <=6.7.14
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.8.9:-:*:*:*:*:*:*
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.8.9:hotfix1:*:*:*:*:*:*
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.8.9:hotfix2:*:*:*:*:*:*
    • (no CPE)range: <=6.10.4, <=6.9.9, <=6.8.9-HF2, <=6.7.x
  • Aruba/ClearPass Policy Managerdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.