CVE-2022-43540: Medium severity aruba clearpass policy manager vulnerability
A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that is of a sensitive nature in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-43540?
CVE-2022-43540 is a vulnerability that exists in the ClearPass OnGuard macOS agent, allowing an attacker with local macOS instance access to potentially obtain sensitive information.
How does CVE-2022-43540 impact Aruba ClearPass Policy Manager?
CVE-2022-43540 allows an attacker to retrieve sensitive information in Aruba ClearPass Policy Manager.
What is the severity of CVE-2022-43540?
CVE-2022-43540 has a severity rating of medium with a score of 5.5.
Which versions of Aruba ClearPass Policy Manager are affected by CVE-2022-43540?
Aruba ClearPass Policy Manager versions 6.9.0 to 6.9.12 and versions 6.10.0 to 6.10.7 are affected by CVE-2022-43540.
How can I mitigate CVE-2022-43540?
To mitigate CVE-2022-43540, ensure you update Aruba ClearPass Policy Manager to a version that is not affected by the vulnerability.