A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive data, potentially compromising the integrity and security of the entire system.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04784en_us&docLocale=en_US | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Mar 2025, 17:53
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
| CPE | cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:* | |
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04784en_us&docLocale=en_US - Vendor Advisory | |
| First Time |
Arubanetworks clearpass Policy Manager
Arubanetworks |
04 Feb 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-04 18:15
Updated : 2025-03-28 17:53
NVD link : CVE-2025-23059
Mitre link : CVE-2025-23059
JSON object : View
Products Affected
arubanetworks
- clearpass_policy_manager
CWE
No CWE.