CVE-2014-2593 The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demo...
HighCVSS 9.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arubanetworks clearpass policy manager | = 6.3.0.60730 | No fix listed |
References
- 109662 vdb-entry
- www.arubanetworks.com
- 69391 vdb-entry
- aruba-clearpass-cve20142593-command-exec(95491) vdb-entry
- www.portcullis-security.com