CVE-2025-23059

Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager

Medium · published February 4, 2025

CVSS v3.1
6.8
EPSS
1%
Percentile
47.9
In the wild
Unconfirmed
What it is

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive data, potentially compromising the integrity and security of the entire system.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00598 · 47.9th percentile
Published
2025-02-04T18:10Z
EPSS history
Timeline
  • 04 FEB 18:10Z
    Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager
    cvelistv5