Remote Code Execution Vulnerability in ClearPass Policy Manager Could Lead to Complete System Compromise

CVE-2024-26295

Summary

The ClearPass Policy Manager by Aruba Networks is susceptible to vulnerabilities within its web-based management interface. This flaw allows remote authenticated users the ability to execute arbitrary commands on the underlying host system. If successfully exploited, this vulnerability can lead to complete system compromise as an attacker gains root-level access to the operating system. Organizations using affected versions should assess their security measures and apply any necessary updates to mitigate risks associated with this vulnerability.

References