Skip to content
OpenAdvisories
Medium · 4.5 CVE-2023-25596 EUVD-2023-29538GHSA-6p72-fpqv-2cff

Authenticated Sensitive Information Disclosure in ClearPass Policy Manager

Published Mar 14, 2023 · Updated Feb 27, 2025 · Assigned by hpe

Description

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager 6.11.1 and below, 6.10.8 and below, 6.9.13 and below —

Advisories 1

References