Aruba Networks, an HP company, has released patches for its ClearPath Policy Manager software that address 14 vulnerabilities.
Patch versions 6.10.6 and lower in the 6.10.x series, and 6.9.11 and lower in the 6.9.x series, are affected by the bugs.
The product’s Web-based management interface contains five vulnerabilities, all of which belong to the category of authenticated SQL injection issues.
The advisory warned that the vulnerabilities CVE-2022-23692, CVE-2022-23693, CVE-2022-23694, CVE-2022-23695, and CVE-2022-23696 could “potentially lead to complete compromise of the ClearPass Policy Manager cluster” by allowing an authenticated remote attacker to “obtain and modify sensitive information in the underlying database.”
Those vulnerabilities are rated high severity and were reported to the company’s bug bounty by Luke Young, collaborating with Daniel Jensen.
CVE-2022-23685, which exposes endpoints to a lack of cross-site request forgery (CSRF) protection, is also of high severity.
If a remote, unauthenticated attacker can persuade an authenticated user of the interface to click on a specially crafted URL, they will be able to execute input against the endpoints.
CVE-2022-37877, a privilege escalation that enables users on a macOS instance to execute arbitrary code as root, affects the ClearPass OnGuard agency for macOS.
It is highly regarded and also Luke Young’s work.
