CVE-2022-43535: High severity aruba clearpass policy manager vulnerability
A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on the Windows instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-43535?
CVE-2022-43535 is a vulnerability in the ClearPass OnGuard Windows agent that allows malicious users to elevate their user privileges.
How does CVE-2022-43535 affect Aruba ClearPass Policy Manager?
CVE-2022-43535 affects Aruba ClearPass Policy Manager versions 6.9.0 to 6.9.12 and 6.10.0 to 6.10.7.
How severe is CVE-2022-43535?
CVE-2022-43535 has a severity rating of 7.8 (high).
How can malicious users exploit CVE-2022-43535?
Malicious users can exploit CVE-2022-43535 to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on a Windows instance in Aruba ClearPass Policy Manager.
Is Microsoft Windows affected by CVE-2022-43535?
Microsoft Windows is not vulnerable to CVE-2022-43535.
Where can I find more information about CVE-2022-43535?
More information about CVE-2022-43535 can be found at: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-020.txt