DeutschShown in its original language — a full translation is planned for a future version.
Aruba ClearPass Policy Manager: Mehrere Schwachstellen
view advisory published 2023-03-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um Administratorrechte zu erlangen, Informationen offenzulegen, einen Cross Site Scripting Angriff durchzuführen und Sicherheitsvorkehrungen zu umgehen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-25596US | medium4.9OT elevated | — | ||
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful e… | ||||
| CVE-2023-25595US | medium5.5 | — | ||
A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful… | ||||
| CVE-2023-25594US | high8.8OT elevated | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the Clea… | ||||
| CVE-2023-25593US | medium6.1 | — | ||
Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against… | ||||
| CVE-2023-25592US | medium6.1 | — | ||
Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against… | ||||
| CVE-2023-25591US | medium6.5 | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A… | ||||
| CVE-2023-25590US | high7.8 | — | ||
A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploi… | ||||
| CVE-2023-25589US | critical9.8OT elevated | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A succes… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan