8.8
Élevée
CVE-2025-23058 A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only)…
Description
A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges. Successful exploitation could enable a low-privileged user to execute administrative functions leading to an escalation of privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HPE Aruba Networking ClearPass Policy Manager 6.12 | 6.12.0 → dernières | Pas de correctif indiqué |
| HPE Aruba Networking ClearPass Policy Manager 6.11 | 6.11.0 → dernières | Pas de correctif indiqué |
Autres CVE de HPE Aruba Networking ClearPass Policy Manager
Les 10 CVE de HPE Aruba Networking ClearPass Policy Manager →
CVE-2026-23599
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software…
7.8
Élevée
CVE-2025-37122
A vulnerability in the web-based management interface of network access control services could allow an…
6.1
Moyenne
CVE-2025-25039
A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows…
4.7
Moyenne
CVE-2025-23060
A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive…
6.6
Moyenne