Medium severity4.7NVD Advisory· Published Dec 3, 2024· Updated Jun 17, 2026
CVE-2024-53672
CVE-2024-53672
Description
A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.
Affected products
3- cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*Range: >=6.11.0,<6.11.10
- Hewlett Packard Enterprise (HPE)/HPE Aruba Networking ClearPass Policy Managerv5Range: 6.12.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
0No linked articles in our index yet.