CVE-2023-25594: Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface
A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of this vulnerability allows an attacker to complete state-changing actions in the web-based management interface that should not be allowed by their current level of authorization on the platform.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-25594?
CVE-2023-25594 is a vulnerability in the web-based management interface of ClearPass Policy Manager that allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance.
How does CVE-2023-25594 impact Arubanetworks Clearpass Policy Manager?
Successful exploitation of CVE-2023-25594 allows an attacker to complete state-changing actions on affected versions of Arubanetworks Clearpass Policy Manager.
What is the severity level of CVE-2023-25594?
CVE-2023-25594 has a severity level of 8.8 (high).
How can I fix CVE-2023-25594?
To fix CVE-2023-25594, it is recommended to apply the necessary patches or updates provided by Arubanetworks for the affected versions of ClearPass Policy Manager.
Where can I find more information about CVE-2023-25594?
You can find more information about CVE-2023-25594 on the Arubanetworks website, specifically in their advisory ARUBA-PSA-2023-003.txt.