CVE-2021-26683: Command Injection
A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-26683?
CVE-2021-26683 has a CVSS score that indicates it is a high-severity vulnerability allowing remote command execution.
How do I fix CVE-2021-26683?
To remediate CVE-2021-26683, upgrade Aruba ClearPass Policy Manager to version 6.9.5 or later, or apply the necessary security hotfixes.
What impact does CVE-2021-26683 have?
CVE-2021-26683 allows authenticated remote users to execute arbitrary commands on the underlying host, potentially compromising the system.
Which versions of Aruba ClearPass Policy Manager are affected by CVE-2021-26683?
CVE-2021-26683 affects Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1.
Who is affected by CVE-2021-26683?
Organizations using vulnerable versions of Aruba ClearPass Policy Manager could be impacted if remote authenticated users exploit this vulnerability.