CVE-2014-2593

Published: Aug 29, 2014Modified: May 6, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.

Affected (1)

Products: Arubanetworks: Clearpass Policy Manager

1 product

Clearpass Policy Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Arubanetworks Clearpass Policy Manager	Version 6.3.0.60730

Related CWEs

References (10)

http://osvdb.org/show/osvdb/109662

Source: cve@mitre.org

http://www.arubanetworks.com/support/alerts/aid-050214.asc

Source: cve@mitre.org

http://www.securityfocus.com/bid/69391

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/95491

Source: cve@mitre.org

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2593

Source: cve@mitre.org

http://osvdb.org/show/osvdb/109662

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.arubanetworks.com/support/alerts/aid-050214.asc

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/69391

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/95491

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2593

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.