Vulnerability · Published Mar 14, 2023 · Assigned by hpe
CVE-2023-25595Sensitive Information Disclosure in ClearPass OnGuard Ubuntu Agent
Medium 5.5
In plain English
A medium-severity improper access control in Aruba ClearPass Policy Manager from Hewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Official description
A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful Exploitation of this vulnerability allows an attacker to retrieve information that is of a sensitive nature to the ClearPass/OnGuard environment.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | Aruba ClearPass Policy Manager | 6.11.1 and below6.10.8 and below6.9.13 and below |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N