CVE-2024-51772 — Authenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a R…

CVE-2024-51772

Authenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a Remote Command Execution (RCE) PUBLISHED

Description (CNA)

An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking ClearPass Policy Manager	affected 6.12.0 through 6.12.2; affected 6.11.0 through 6.11.9

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04761en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.