CVE-2022-43530: SQL Injection
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-43530?
CVE-2022-43530 is a vulnerability in the web-based management interface of ClearPass Policy Manager that could allow an authenticated remote attacker to conduct SQL injection attacks.
What is the severity of CVE-2022-43530?
The severity of CVE-2022-43530 is high, with a severity value of 8.8.
How does CVE-2022-43530 affect ClearPass Policy Manager?
CVE-2022-43530 affects ClearPass Policy Manager versions 6.9.0 to 6.9.12 and versions 6.10.0 to 6.10.7.
How can an attacker exploit CVE-2022-43530?
An attacker can exploit CVE-2022-43530 by conducting SQL injection attacks against the ClearPass Policy Manager instance.
Is there a fix for CVE-2022-43530?
Yes, Arubanetworks has released a fix for CVE-2022-43530. Refer to the Arubanetworks advisory for more information.