CVE-2024-53672: Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface
A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53672?
CVE-2024-53672 is rated as a high-severity vulnerability due to its potential to allow remote authenticated users to execute arbitrary commands.
How do I fix CVE-2024-53672?
To fix CVE-2024-53672, upgrade to the latest version of HPE ClearPass Policy Manager as recommended in the security advisory.
Who is affected by CVE-2024-53672?
CVE-2024-53672 affects users of the HPE ClearPass Policy Manager with access to the web-based management interface.
What types of attacks are possible with CVE-2024-53672?
Exploitation of CVE-2024-53672 could allow attackers to run arbitrary commands on the underlying host via the ClearPass interface.
Is CVE-2024-53672 being actively exploited?
As of now, there have been no reported active exploits for CVE-2024-53672, but it is important to apply patches to mitigate the risk.