HPE Aruba Networking ClearPass Policy Manager Web Interface Command Injection Vulnerability

A command injection vulnerability has been identified in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM). This vulnerability allows remote authenticated users to execute arbitrary commands on the host operating system with lower privileges. The issue arises from insufficient input validation, enabling exploitation by manipulating command parameters.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution on the underlying host operating system, potentially allowing an attacker to perform actions as a lower privileged user.