CVE-2022-37884: High severity aruba clearpass policy manager vulnerability
A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which result in a Denial-of-Service condition. A successful exploitation of this vulnerability results in the unavailability of the guest interface in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-37884?
CVE-2022-37884 is a vulnerability that exists in the ClearPass Policy Manager Guest User Interface which can result in a Denial-of-Service condition.
How does CVE-2022-37884 affect Arubanetworks Clearpass Policy Manager?
CVE-2022-37884 affects Arubanetworks Clearpass Policy Manager versions between 6.9.0 and 6.9.12, as well as versions between 6.10.0 and 6.10.7.
What is the severity of CVE-2022-37884?
CVE-2022-37884 has a severity rating of 7.5 (high).
How can an unauthenticated attacker exploit CVE-2022-37884?
An unauthenticated attacker can exploit CVE-2022-37884 by sending specific operations to the ClearPass Policy Manager Guest User Interface, resulting in a Denial-of-Service condition.
How can I fix CVE-2022-37884?
There is currently no known fix for CVE-2022-37884. It is recommended to apply the patches or updates provided by Arubanetworks once they are available.