CVE-2022-37877

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Sep 20, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-378787.2Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on CVE-2022-378797.2Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on CVE-2022-378807.2Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on CVE-2022-378817.2Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on CVE-2022-378827.2Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on CVE-2022-378837.2Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on CVE-2022-378847.5A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific oper CVE-2022-378859.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin CVE-2022-378869.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin CVE-2022-378879.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin CVE-2022-378889.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin CVE-2022-378899.8There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin