VYPR
← All advisories
High severity7.8NVD Advisory· Published Jan 5, 2023· Updated Jun 17, 2026

CVE-2022-43534

CVE-2022-43534

Description

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the Linux instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Affected products

4
  • Arubanetworks/ClearPass Policy Manager2 versions
    cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*range: >=6.9.0,<6.9.12
    • (no CPE)range: 6.10.x <= 6.10.7, 6.9.x <= 6.9.12
  • Arubanetworks/ClearPass OnGuard Linux agentllm-create
    Range: 6.10.x <= 6.10.7, 6.9.x <= 6.9.12
  • Hewlett Packard Enterprise (HPE)/Aruba ClearPass Policy Managerv5
    Range: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.