Page 3 of 13 results (0.004 seconds)

CVSS: 7.6EPSS: 0%CPEs: 4EXPL: 0

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further privileges on the ClearPass instance. • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance. • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt • CWE-269: Improper Privilege Management •

CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise. • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt •