CVE-2024-26301

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access…

Medium · published February 27, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00516 · 43.1th percentile
Published
2024-02-27T22:10Z
EPSS history
Timeline
  • 27 FEB 22:10Z
    A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access…
    cvelistv5