CVE-2022-43535
First published: Tue Jan 03 2023(Updated: )
A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on the Windows instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.
Credit: security-alert@hpe.com security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Arubanetworks Clearpass Policy Manager | >=6.9.0<6.9.12 | |
| Arubanetworks Clearpass Policy Manager | >=6.10.0<6.10.7 | |
| Microsoft Windows | ||
| All of | ||
| Any of | ||
| Arubanetworks Clearpass Policy Manager | >=6.9.0<6.9.12 | |
| Arubanetworks Clearpass Policy Manager | >=6.10.0<6.10.7 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-43535?
CVE-2022-43535 is a vulnerability in the ClearPass OnGuard Windows agent that allows malicious users to elevate their user privileges.
How does CVE-2022-43535 affect Aruba ClearPass Policy Manager?
CVE-2022-43535 affects Aruba ClearPass Policy Manager versions 6.9.0 to 6.9.12 and 6.10.0 to 6.10.7.
How severe is CVE-2022-43535?
CVE-2022-43535 has a severity rating of 7.8 (high).
How can malicious users exploit CVE-2022-43535?
Malicious users can exploit CVE-2022-43535 to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on a Windows instance in Aruba ClearPass Policy Manager.
Is Microsoft Windows affected by CVE-2022-43535?
Microsoft Windows is not vulnerable to CVE-2022-43535.
Where can I find more information about CVE-2022-43535?
More information about CVE-2022-43535 can be found at: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-020.txt
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/arubanetworks
- canonical/arubanetworks clearpass policy manager
- version/arubanetworks clearpass policy manager/6.9.0
- version/arubanetworks clearpass policy manager/6.10.0
- vendor/microsoft
- canonical/microsoft windows