Description
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ClearPass Policy Manager (CPPM) | 6.11.0 – ≤ 6.11.14 | — |
Advisories 1
- WID-SEC-2026-3302 Aruba ClearPass Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 9, 2026