CVE-2023-43508
Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of these vulnerabilities allow an attacker to complete state-changing actions in the web-based management interface that should not be allowed by their current level of authorization on the platform.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Modified - security-alert@hpe.com
- Published
- 2023-10-25
- Last modified
- 2024-09-11
- Weaknesses
- CWE-863
Affected products
- Clearpass Policy Manager (Arubanetworks)
- Aruba Clearpass Policy Manager (Hewlett Packard Enterprise Hpe)
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt
