CVE-2021-26677: High severity aruba clearpass policy manager vulnerability
A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users on a Windows platform to elevate their privileges. A successful exploit could allow an attacker to execute arbitrary code with SYSTEM level privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-26677?
CVE-2021-26677 has been classified as a local authenticated escalation of privilege vulnerability.
How do I fix CVE-2021-26677?
To fix CVE-2021-26677, upgrade Aruba ClearPass Policy Manager to version 6.9.5 or later, or to 6.8.8-HF1 or later, or to 6.7.14-HF1 or later.
What versions of Aruba ClearPass Policy Manager are affected by CVE-2021-26677?
CVE-2021-26677 affects Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1.
Who can exploit CVE-2021-26677?
CVE-2021-26677 can be exploited by local authenticated users on a Windows platform.
What impact does CVE-2021-26677 have on my system?
CVE-2021-26677 allows local authenticated users to elevate their privileges on affected systems.