Skip to content
OpenAdvisories
High · 7.8 CVE-2023-25590 EUVD-2023-29532GHSA-rvfx-9wj8-x7mm

Local Privilege Escalation in ClearPass OnGuard Linux Agent

Published Mar 14, 2023 · Updated Feb 27, 2025 · Assigned by hpe

Description

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager 6.11.1 and below, 6.10.8 and below, 6.9.13 and below —

Advisories 1

References