Remote Code Execution Vulnerability in ClearPass Policy Manager Could Lead to Complete System Compromise

CVE-2024-26298

Summary

The ClearPass Policy Manager by Aruba Networks has a vulnerability in its web-based management interface that allows remote authenticated users to execute arbitrary commands on the underlying host. This exposure can lead to full system compromise as the attacker may execute commands with root privileges, potentially endangering sensitive data and operations. Organizations utilizing affected versions of ClearPass should apply security updates promptly to mitigate risks associated with this vulnerability.

References