CVE-2023-25595: Sensitive Information Disclosure in ClearPass OnGuard Ubuntu Agent
A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful Exploitation of this vulnerability allows an attacker to retrieve information that is of a sensitive nature to the ClearPass/OnGuard environment.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-25595.
What is the severity of CVE-2023-25595?
The severity of CVE-2023-25595 is medium with a CVSS score of 5.5.
Which software is affected by CVE-2023-25595?
ClearPass Policy Manager versions 6.9.0 to 6.9.13, 6.10.0 to 6.10.8, 6.11.0, and 6.11.1 are affected by CVE-2023-25595.
What can an attacker potentially do with this vulnerability?
An attacker with local Ubuntu instance access can potentially obtain sensitive information from the ClearPass OnGuard Ubuntu agent.
Where can I find more information about CVE-2023-25595?
You can find more information about CVE-2023-25595 at the following link: [Aruba Networks Advisory ARUBA-PSA-2023-003](https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt)