PT-2023-14250 · Aruba · Aruba Clearpass Policy Manager
CVE-2022-43539
·
Publicado
2023-01-03
·
Atualizado
2023-08-08
CVSS v3.1
5.7
Média
| Vetor | AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Aruba ClearPass Policy Manager versions 6.10.7 and below
Aruba ClearPass Policy Manager versions 6.9.12 and below
Description
A vulnerability exists in the ClearPass Policy Manager cluster communications, allowing an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that enables unauthorized actions as a privileged user on the ClearPass Policy Manager cluster.
Recommendations
For versions 6.10.7 and below, update to a version above 6.10.7 to resolve the issue.
For versions 6.9.12 and below, update to a version above 6.9.12 to resolve the issue.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Aruba Clearpass Policy Manager