What is the severity of CVE-2025-23058?

CVE-2025-23058 is classified as a high-severity vulnerability due to its potential for unauthorized access and execution of restricted functions.

How do I fix CVE-2025-23058?

To fix CVE-2025-23058, ensure that you apply the latest security patches and updates provided by Hewlett Packard for ClearPass Policy Manager.

What are the risks associated with CVE-2025-23058?

The risks associated with CVE-2025-23058 include unauthorized data access and the ability to execute administrative functions by low-privileged users.

Who is affected by CVE-2025-23058?

CVE-2025-23058 affects users of Hewlett Packard ClearPass Policy Manager who have low-privileged accounts.

What types of attacks can be executed using CVE-2025-23058?

Using CVE-2025-23058, an authenticated attacker can exploit the vulnerability to gain unauthorized access and perform actions typically reserved for administrators.

Vulnerability/
CVE-2025-23058

high

8.8

EPSS

0.043%

4/2/2025

CVE-2025-23058: Authenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management Interface

First published: Tue Feb 04 2025(Updated: )

A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges. Successful exploitation could enable a low-privileged user to execute administrative functions leading to an escalation of privileges.

Credit: security-alert@hpe.com

Affected Software	Affected Version	How to fix
Hewlett Packard ClearPass Policy Manager

Never miss a vulnerability like this again

Reference Links

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04784en_us&docLocale=en_US

Frequently Asked Questions

What is the severity of CVE-2025-23058?
CVE-2025-23058 is classified as a high-severity vulnerability due to its potential for unauthorized access and execution of restricted functions.
How do I fix CVE-2025-23058?
To fix CVE-2025-23058, ensure that you apply the latest security patches and updates provided by Hewlett Packard for ClearPass Policy Manager.
What are the risks associated with CVE-2025-23058?
The risks associated with CVE-2025-23058 include unauthorized data access and the ability to execute administrative functions by low-privileged users.
Who is affected by CVE-2025-23058?
CVE-2025-23058 affects users of Hewlett Packard ClearPass Policy Manager who have low-privileged accounts.
What types of attacks can be executed using CVE-2025-23058?
Using CVE-2025-23058, an authenticated attacker can exploit the vulnerability to gain unauthorized access and perform actions typically reserved for administrators.

collector/mitre-cve
source/MITRE
agent/references
agent/title
agent/description
agent/type
agent/first-publish-date
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/softwarecombine
collector/nvd-api
source/NVD
agent/last-modified-date
agent/severity
agent/author
agent/event
collector/epss-latest
source/FIRST
agent/source
agent/tags
agent/epss
vendor/hewlett packard
canonical/hewlett packard clearpass policy manager

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.