CVE-2023-25596: arubanetworks clearpass_policy_manager

Vulnerability summary

CVE-2023-25596 is a medium (CVSS 4.9) vulnerability in arubanetworks clearpass_policy_manager. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 25.1% of scored vulnerabilities.

Timeline

1. 14-03-2023
   PublishedVulnerability first disclosed.
2. 27-02-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

• CWE-312Cleartext Storage of Sensitive InformationThe product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.