CVE-2023-25595
Assigner: hpe
Published: 2023-03-14T14:55:37.876Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Aruba ClearPass Policy Manager
vendor: Hewlett Packard Enterprise (HPE)
versions: status: affected
version: 6.11.1 and below
status: affected
version: 6.10.8 and below
status: affected
version: 6.9.13 and below
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: the security team at Airowire Networks
datePublic: 2023-03-14T19:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value:  A vulnerability exists in the ClearPass OnGuard Ubuntu agent&nbsp;that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful Exploitation of this vulnerability allows an attacker to retrieve information that is of a sensitive nature to the ClearPass/OnGuard environment.
value:  A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful Exploitation of this vulnerability allows an attacker to retrieve information that is of a sensitive nature to the ClearPass/OnGuard environment.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
source: discovery: UNKNOWN
title: Sensitive Information Disclosure in ClearPass OnGuard Ubuntu Agent
x_generator: engine: Vulnogram 0.1.0-dev
problemTypes: descriptions: description: n/a
type: text