CVE-2021-34615: OS Command Injection
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-34615?
CVE-2021-34615 is a remote arbitrary command execution vulnerability classified with a high severity level.
How do I fix CVE-2021-34615?
To fix CVE-2021-34615, upgrade Aruba ClearPass Policy Manager to version 6.10.0 or later.
Which versions of Aruba ClearPass Policy Manager are affected by CVE-2021-34615?
CVE-2021-34615 affects Aruba ClearPass Policy Manager versions prior to 6.10.0, including 6.9.6 and 6.8.9.
What could happen if CVE-2021-34615 is exploited?
If exploited, CVE-2021-34615 could allow an attacker to execute arbitrary commands on the affected Aruba ClearPass Policy Manager system.
Has Aruba provided any updates regarding CVE-2021-34615?
Yes, Aruba has released updates for ClearPass Policy Manager to address the security vulnerability described in CVE-2021-34615.