What is the severity of CVE-2024-41916?

CVE-2024-41916 is classified as a high-severity vulnerability due to its potential to expose sensitive information.

How do I fix CVE-2024-41916?

To address CVE-2024-41916, it is recommended to upgrade ClearPass Policy Manager to the latest version beyond 6.12.1.

Who is affected by CVE-2024-41916?

CVE-2024-41916 affects users of ClearPass Policy Manager versions up to and including 6.11.8 and versions 6.12.0 and 6.12.1.

What is the impact of CVE-2024-41916?

The impact of CVE-2024-41916 includes unauthorized access to sensitive information in cleartext by an attacker with administrative privileges.

Can CVE-2024-41916 be exploited remotely?

Yes, CVE-2024-41916 can be exploited by an attacker with administrative access, potentially leading to further access within the system.

Vulnerability/
CVE-2024-41916

medium

6.8

30/7/2024

28/10/2024

CVE-2024-41916: Authenticated Sensitive Information Disclosure in ClearPass Policy Manager

First published: Tue Jul 30 2024(Updated: )

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

Credit: security-alert@hpe.com

Affected Software	Affected Version	How to fix
Aruba ClearPass Policy Manager	<=6.11.8
Aruba ClearPass Policy Manager	=6.12.0
Aruba ClearPass Policy Manager	=6.12.1

Never miss a vulnerability like this again

Reference Links

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04675en_us&docLocale=en_US

Frequently Asked Questions

What is the severity of CVE-2024-41916?
CVE-2024-41916 is classified as a high-severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2024-41916?
To address CVE-2024-41916, it is recommended to upgrade ClearPass Policy Manager to the latest version beyond 6.12.1.
Who is affected by CVE-2024-41916?
CVE-2024-41916 affects users of ClearPass Policy Manager versions up to and including 6.11.8 and versions 6.12.0 and 6.12.1.
What is the impact of CVE-2024-41916?
The impact of CVE-2024-41916 includes unauthorized access to sensitive information in cleartext by an attacker with administrative privileges.
Can CVE-2024-41916 be exploited remotely?
Yes, CVE-2024-41916 can be exploited by an attacker with administrative access, potentially leading to further access within the system.

agent/title
agent/references
agent/type
agent/first-publish-date
agent/description
agent/author
agent/event
agent/severity
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/softwarecombine
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/arubanetworks
canonical/aruba clearpass policy manager
version/aruba clearpass policy manager/6.11.8
version/aruba clearpass policy manager/6.12.0
version/aruba clearpass policy manager/6.12.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.