Aruba Networks ClearPass Policy Manager privilege escalation

NAME
__________
Aruba Networks ClearPass Policy Manager privilege escalation

Platforms Affected:
Aruba Networks ClearPass Policy Manager 6.9.13
Aruba Networks ClearPass Policy Manager 6.11.1
Aruba Networks ClearPass Policy Manager 6.10.8

Risk Level:
6.3

Exploitability:
Unproven

Consequences:
Bypass Security

DESCRIPTION
__________

Aruba Networks ClearPass Policy Manager could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an authorization bypass flaw in the web-based management interface. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges to change the state of the ClearPass Policy Manager instance.

CVSS 3.0 Information
__________

Privileges Required:
Low

User Interaction:
None

Scope:
Unchanged

Access Vector:
Network

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

To keep up to date follow us on the below channels.

Tags: Bypass Security, CVE, CVE-2023-25594

Aruba Networks ClearPass Policy Manager privilege escalation | CVE-2023-25594

Brute Ratel C4 Detected – 213[.]199[.]35[.]149:443

Brute Ratel C4 Detected – 52[.]193[.]137[.]127:80

Brute Ratel C4 Detected – 18[.]181[.]61[.]11:80

GoPhish Login Page Detected – 164[.]92[.]223[.]34:3333

GoPhish Login Page Detected – 46[.]101[.]213[.]152:3333

You may have missed

Brute Ratel C4 Detected – 213[.]199[.]35[.]149:443

Brute Ratel C4 Detected – 52[.]193[.]137[.]127:80

Brute Ratel C4 Detected – 18[.]181[.]61[.]11:80

GoPhish Login Page Detected – 164[.]92[.]223[.]34:3333

GoPhish Login Page Detected – 46[.]101[.]213[.]152:3333