Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-43506

Local Privilege Escalation in ClearPass OnGuard Linux Agent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Default version status: unaffected

  • ClearPass Policy Manager 6.11.x: 6.11.4 and below to ≤ <=6.11.4affected
  • ClearPass Policy Manager 6.10.x: 6.10.8 with ClearPass 6.10.8 Cumulative Hotfix Patch 5 and belowaffected
  • ClearPass Policy Manager 6.9.x: 6.9.13 with ClearPass 6.9.13 Cumulative Hotfix Patch 3 and belowaffected

References