Poly Clariti Manager Command Injection Vulnerability

A command injection vulnerability has been identified in Poly Clariti Manager versions prior to 10.12.2. This vulnerability allows a privileged user to submit arbitrary input, potentially leading to unauthorized command execution. HP has released a patch in the latest software update.

Impact

Exploitation of this vulnerability could result in remote code execution, allowing an attacker to execute arbitrary commands on the server where Poly Clariti Manager is running.

Remediation

Users are advised to update to version 10.12.2 or later. The latest builds can be obtained through the Poly Lens Management Console.