Security Advisory

CVE-2025-23058

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-02-04 18:07:56
Last updated 2025-03-13 13:28:04
Assigner hpe
State PUBLISHED

Description

A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges. Successful exploitation could enable a low-privileged user to execute administrative functions leading to an escalation of privileges.