CVE-2024-41915: Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41915?
CVE-2024-41915 has a critical severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2024-41915?
To mitigate CVE-2024-41915, it is recommended to apply the latest security patches provided by Aruba Networks for ClearPass Policy Manager.
Who is affected by CVE-2024-41915?
Users of Aruba Networks ClearPass Policy Manager are affected by CVE-2024-41915.
What type of vulnerability is CVE-2024-41915?
CVE-2024-41915 is classified as an SQL injection vulnerability in the web-based management interface.
Can CVE-2024-41915 be exploited remotely?
Yes, CVE-2024-41915 allows an authenticated remote attacker to exploit the vulnerability.