Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-23060

Опубликовано: 04 фев. 2025
Источник: nvd
CVSS3: 6.6
CVSS3: 8.1
EPSS Низкий

Описание

A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources as well as enabling data tampering.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*
Версия от 6.11.0 (включая) до 6.11.10 (исключая)
cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*
Версия от 6.12.0 (включая) до 6.12.4 (исключая)

EPSS

Процентиль: 30%
0.0011
Низкий

6.6 Medium

CVSS3

8.1 High

CVSS3

Дефекты

CWE-319

Связанные уязвимости

CVSS3: 6.6
github
около 1 года назад

A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources as well as enabling data tampering.

EPSS

Процентиль: 30%
0.0011
Низкий

6.6 Medium

CVSS3

8.1 High

CVSS3

Дефекты

CWE-319