CVE-2022-43533 Privilege escalation in Aruba ClearPass Policy Manager

High 7.8 Published 3 Jan 2023 Updated 10 Apr 2025

Malicious local users can elevate privileges to root and execute arbitrary code on macOS instances running the ClearPass OnGuard agent.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-43533?

CVE-2022-43533 is a high-severity vulnerability in Arubanetworks Clearpass Policy Manager, published on 3 Jan 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Weakness: CWE-269

Which versions are affected by CVE-2022-43533?

It affects 1 product.

Products include Arubanetworks Clearpass Policy Manager.

How do I fix CVE-2022-43533?

No fix has been published for CVE-2022-43533 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-43533 being exploited?

There is no known exploitation of CVE-2022-43533 in the wild and no public exploit code.

All Arubanetworks Clearpass Policy Manager vulnerabilities

Sources

Also known as GHSA-q348-8x26-5676.