Description
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | ClearPass Policy Manager (CPPM) | 6.14.0 – ≤ 6.14.0 | — |
Advisories 1
- WID-SEC-2026-3762 Aruba ClearPass Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2026