← Back

CVE-2023-43506

nvd nist
Published: Oct 25, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.

Affected (9)

Arubanetworks
1 product
Clearpass Policy Manager
Configuration A
9 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Arubanetworks
Clearpass Policy Manager
Before 6.9.13
Clearpass Policy Manager
From 6.10.0 to 6.10.8
Clearpass Policy Manager
From 6.11.0 to 6.11.4
Clearpass Policy Manager
Version 6.10.8
Clearpass Policy Manager
Version 6.10.8 cumulative_hotfix_patch_2
Clearpass Policy Manager
Version 6.10.8 cumulative_hotfix_patch_5
Clearpass Policy Manager
Version 6.9.13
Clearpass Policy Manager
Version 6.9.13 cumulative_hotfix_patch_2
Clearpass Policy Manager
Version 6.9.13 cumulative_hotfix_patch_3
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: security-alert@hpe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.