Description
A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Published: 2023-01-03
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-46531 A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.
History

Thu, 10 Apr 2025 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-269
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Apple Macos
Arubanetworks Clearpass Policy Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2025-04-10T15:26:04.791Z

Reserved: 2022-10-20T12:58:24.597Z

Link: CVE-2022-43533

cve-icon Vulnrichment

Updated: 2024-08-03T13:32:59.659Z

cve-icon NVD

Status : Modified

Published: 2023-01-05T07:15:12.943

Modified: 2025-04-10T16:15:24.643

Link: CVE-2022-43533

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses