DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Aruba ClearPass Policy Manager: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-03-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um Administratorrechte zu erlangen, Informationen offenzulegen, einen Cross Site Scripting Angriff durchzuführen und Sicherheitsvorkehrungen zu umgehen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-25596US | medium4.9OT erhöht | — | ||
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful e… | ||||
| CVE-2023-25595US | medium5.5 | — | ||
A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful… | ||||
| CVE-2023-25594US | high8.8OT erhöht | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the Clea… | ||||
| CVE-2023-25593US | medium6.1 | — | ||
Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against… | ||||
| CVE-2023-25592US | medium6.1 | — | ||
Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against… | ||||
| CVE-2023-25591US | medium6.5 | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A… | ||||
| CVE-2023-25590US | high7.8 | — | ||
A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploi… | ||||
| CVE-2023-25589US | critical9.8OT erhöht | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A succes… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan