CVE-2022-43539 — Sensitive Information Exposure in Clearpass Policy Manager
Severity
4.5MEDIUMNVD
CNA5.7
EPSS
0.1%
top 75.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 5
Description
A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a privileged user on the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.9 | Impact: 3.6
Affected Packages2 packages
▶CVEListV5hewlett_packard_enterprise/aruba_clearpass_policy_managerClearPass Policy Manager 6.10.x: 6.10.7 and below, ClearPass Policy Manager 6.9.x: 6.9.12 and below
🔴Vulnerability Details
2GHSA▶
GHSA-x53x-v2cq-q98v: A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potential↗2023-01-05
CVEList▶
CVE-2022-43539: A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potential↗2023-01-03