VULNERABILITY INTELLIGENCE
CVE-2024-51772
CVSS score6.4 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2024-12-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Description
An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-77
Primary references
- security-alert@hpe.com — Vendor Advisory