CVE-2022-43535 — Hewlett Packard Enterprise (HPE) / Aruba ClearPass Policy Manager

Description (CNA)

A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on the Windows instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Aruba ClearPass Policy Manager	affected ClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below

CWE

No CWE identifiers supplied.

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-020.txt

ADP enrichment

CVE

No English description supplied.

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-020.txt

CISA-ADP

No English description supplied.

No references supplied.