CVE-2023-25589

Publication date

2023-03-14 14:44:57

Family

hpe

State

PUBLISHED

Description

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise.