Description
A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources as well as enabling data tampering.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | HPE Aruba Networking ClearPass Policy Manager | 6.12.0 – ≤ <=6.12.3, 6.11.0 – ≤ <=6.11.9 | — |
Advisories 1
- WID-SEC-2025-0261 Aruba ClearPass Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 4, 2025