medium4.7
CVE-2023-43510
A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying ho…
Impact
A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a non-privileged user on the underlying operating system leading to partial system compromise.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | Clearpass Policy Manager | before 6.9.13 from 6.10.0 before 6.10.8 from 6.11.0 through 6.11.4 Versions 6.9.13, 6.10.8 |