CVE-2021-29144: 
Aruba ClearPass vulnerability analysis and mitigation

A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.7.14-HF1, 6.8.x prior to 6.8.9, and 6.9.x prior to 6.9.5. This vulnerability was disclosed in April 2021 as part of multiple vulnerabilities found in Aruba products (CERT-FR).

The vulnerability affects multiple versions of the ClearPass Policy Manager software. The affected versions include ClearPass versions 6.7.x prior to 6.7.14-HF1, versions 6.8.x prior to 6.8.9, and versions 6.9.x prior to 6.9.5 (CERT-FR).

The vulnerability allows a local attacker to escalate their privileges on the affected system. This could potentially lead to unauthorized access to system resources and compromise of system security (CERT-FR).

The vulnerability requires local access to the system to be exploited. No public exploits were identified in the search results.

Aruba has released patches to address this vulnerability. Users should upgrade to ClearPass version 6.7.14-HF1 or later, version 6.8.9 or later, or version 6.9.5 or later, depending on their current version track (CERT-FR).