CVE-2024-41916: Authenticated Sensitive Information Disclosure in ClearPass Policy Manager
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41916?
CVE-2024-41916 is classified as a high-severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2024-41916?
To address CVE-2024-41916, it is recommended to upgrade ClearPass Policy Manager to the latest version beyond 6.12.1.
Who is affected by CVE-2024-41916?
CVE-2024-41916 affects users of ClearPass Policy Manager versions up to and including 6.11.8 and versions 6.12.0 and 6.12.1.
What is the impact of CVE-2024-41916?
The impact of CVE-2024-41916 includes unauthorized access to sensitive information in cleartext by an attacker with administrative privileges.
Can CVE-2024-41916 be exploited remotely?
Yes, CVE-2024-41916 can be exploited by an attacker with administrative access, potentially leading to further access within the system.