PT-2023-14250 · Aruba · Aruba Clearpass Policy Manager

CVE-2022-43539

·

Publicado

2023-01-03

·

Atualizado

2023-08-08

CVSS v3.1

5.7

Média

VetorAV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.12 and below
Description A vulnerability exists in the ClearPass Policy Manager cluster communications, allowing an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that enables unauthorized actions as a privileged user on the ClearPass Policy Manager cluster.
Recommendations For versions 6.10.7 and below, update to a version above 6.10.7 to resolve the issue. For versions 6.9.12 and below, update to a version above 6.9.12 to resolve the issue.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-43539

Produtos afetados

Aruba Clearpass Policy Manager