CVE-2021-26677 Privilege escalation in Aruba ClearPass Policy Manager
Local authenticated users on Windows can exploit ClearPass OnGuard to elevate privileges and execute arbitrary code with SYSTEM level access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-26677?
CVE-2021-26677 is a high-severity vulnerability in Arubanetworks Clearpass Policy Manager, published on 23 Feb 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users on a Windows platform to elevate their privileges. A successful exploit could allow an attacker to execute arbitrary code with SYSTEM level privileges.
Which versions are affected by CVE-2021-26677?
It affects 1 product.
Products include Arubanetworks Clearpass Policy Manager.
How do I fix CVE-2021-26677?
No fix has been published for CVE-2021-26677 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-26677 being exploited?
There is no known exploitation of CVE-2021-26677 in the wild and no public exploit code.
Other vulnerabilities in Arubanetworks Clearpass Policy Manager
- CVE-2022-23657 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2022-23658 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2022-23660 Auth bypass in Aruba ClearPass Policy Manager
- CVE-2023-25589 Unauthenticated Arbitrary User Creation Leads to Complete System Compromise
- CVE-2021-37736 Auth bypass in Aruba ClearPass Policy Manager
Sources
Also known as GHSA-xx4w-vp73-2842.