CVE-2024-53672

Summary

CVE-2024-53672 is a newly disclosed vulnerability affecting the ClearPass Policy Manager web-based interface. This issue grants remote authenticated users the ability to execute arbitrary commands on the underlying host. Successfully exploiting this vulnerability could allow an attacker to gain lower privileged access to the operating system, potentially leading to further compromise. The interface itself is the entry point for the attack, making it a significant concern for network security teams. The exact cause of the vulnerability has not been disclosed, but it is recommended that organizations using ClearPass Policy Manager apply patches or updates as soon as they become available to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.