CVE-2022-37877: High severity aruba clearpass policy manager vulnerability
A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-37877?
CVE-2022-37877 is a vulnerability in the ClearPass OnGuard macOS agent that could allow malicious users on a macOS instance to elevate their user privileges.
How does CVE-2022-37877 impact Aruba ClearPass Policy Manager?
A successful exploit of CVE-2022-37877 could allow malicious users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager.
Which versions of Aruba ClearPass Policy Manager are affected by CVE-2022-37877?
Aruba ClearPass Policy Manager versions 6.9.0 to 6.9.12 and versions 6.10.0 to 6.10.7 are affected by CVE-2022-37877.
Is Apple macOS affected by CVE-2022-37877?
No, Apple macOS is not affected by CVE-2022-37877.
How severe is CVE-2022-37877?
CVE-2022-37877 has a severity rating of 7.8, which is classified as high.
Where can I find more information about CVE-2022-37877?
You can find more information about CVE-2022-37877 at the following reference link: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-013.txt