CVE-2023-25596
published 2023-03-22CVE-2023-25596: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext…
PriorityP427medium4.9CVSS 3.1
AVNACLPRHUINSUCHINAN
EPSS
0.33%
25.0th percentile
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arubanetworks | clearpass_policy_manager | — | — |
| arubanetworks | clearpass_policy_manager | — | — |
| arubanetworks | clearpass_policy_manager | 6.10.0 – 6.10.8 | — |
| arubanetworks | clearpass_policy_manager | 6.9.0 – 6.9.13 | — |
| hewlett_packard_enterprise | aruba_clearpass_policy_manager | — | — |
| hewlett_packard_enterprise | aruba_clearpass_policy_manager | — | — |
| hewlett_packard_enterprise | aruba_clearpass_policy_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-22
Published