VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 3, 2023· Updated Apr 10, 2025

CVE-2022-43535

CVE-2022-43535

Description

A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on the Windows instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Affected products

2
  • Arubanetworks/Clearpass Policy Managerllm-fuzzy
    Range: >=6.9.0 <=6.9.12, >=6.10.0 <=6.10.7
  • Hewlett Packard Enterprise (HPE)/Aruba ClearPass Policy Managerv5
    Range: ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.