CVE-2021-26681: Command Injection
A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-26681?
CVE-2021-26681 is considered a high severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2021-26681?
To mitigate CVE-2021-26681, upgrade Aruba ClearPass Policy Manager to version 6.9.5 or later, 6.8.8-HF1, or 6.7.14-HF1.
Who is affected by CVE-2021-26681?
CVE-2021-26681 affects Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1.
What kind of attack can exploit CVE-2021-26681?
CVE-2021-26681 can be exploited by authenticated remote users to execute arbitrary commands on the ClearPass host.
Is CVE-2021-26681 being actively exploited?
As of the latest information, there have been reports of active exploitation of CVE-2021-26681 in the wild.