by Kastro
Paper/Archive/CVE-2022-23661

CVE-2022-23661

hpe — A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9…

EPSS 2%CVSS 9.1
critical.is priorityof 100
44
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 82.5.825 × 2016.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.

Affected

ProductAffectedFixed inSource
Aruba ClearPass Policy Manager6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

refarubanetworks.com/assets/alert/ARUBA-PSA-2022-007.txt