CVE-2024-26295: Command Injection
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26295?
The severity of CVE-2024-26295 is considered critical due to the potential for remote authenticated users to execute arbitrary commands as root.
How do I fix CVE-2024-26295?
To fix CVE-2024-26295, update your Aruba ClearPass Policy Manager to the latest version or apply any pertinent security patches provided by Aruba Networks.
What are the affected versions for CVE-2024-26295?
CVE-2024-26295 affects Aruba ClearPass Policy Manager versions 6.9.0 to 6.9.13, 6.10.0 to 6.10.8, and 6.11.0 to 6.11.6.
Could the exploitation of CVE-2024-26295 lead to data breaches?
Yes, exploitation of CVE-2024-26295 could allow attackers to compromise the underlying operating system, which poses a significant risk for data breaches.
Who is at risk for CVE-2024-26295?
Remote authenticated users of the affected versions of Aruba ClearPass Policy Manager are at risk for CVE-2024-26295.