CVE-2023-25591 (published 2023-03-14T14:49:52.855Z)
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further privileges on the ClearPass instance.
Affected products: Vendor: Hewlett Packard Enterprise (HPE)
Product: Aruba ClearPass Policy Manager
Versions: 6.11.1 and below, 6.10.8 and below, 6.9.13 and below