CVE-2025-25039: Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25039?
CVE-2025-25039 has a high severity rating due to its potential for remote command execution by authenticated users.
How do I fix CVE-2025-25039?
To fix CVE-2025-25039, it is recommended to apply the latest security patches provided by HPE for the ClearPass Policy Manager.
Who is affected by CVE-2025-25039?
CVE-2025-25039 affects users of HPE Aruba Networking ClearPass Policy Manager with access to the web-based management interface.
Can CVE-2025-25039 be exploited remotely?
Yes, CVE-2025-25039 can be exploited remotely by authenticated users with access to the web-based management interface.
What are the potential implications of exploiting CVE-2025-25039?
Exploiting CVE-2025-25039 may allow attackers to execute arbitrary commands on the underlying host, leading to elevated privileges or data compromise.