CVE-2025-23060 Sensitive Data Exposure Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM)

A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources a...

CVE-2025-23060

CVE-2025-23060 affects HPE Aruba Networking ClearPass Policy Manager. The connected sources confirm a vulnerability that may expose sensitive unencrypted information, enabling a man-in-the-middle scenario that could grant unauthorized access and allow data tampering. Specific technical details (a...

CVE-2025-23060 Sensitive Data Exposure Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM)

A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources a...

CVE-2025-23059 Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive...

CVE-2025-23059 Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive...

CVE-2025-23059

CVE-2025-23059 describes a vulnerability in the web-based management interface of Hewlett Packard Enterprise Aruba Networking ClearPass Policy Manager. The issue allows an authenticated remote attacker with high privileges to access and retrieve directories containing sensitive information, poten...

CVE-2025-23058

Summary: CVE-2025-23058 affects Aruba ClearPass Policy Manager (web-based management interface). The vulnerability enables a low-privileged (read-only) authenticated remote attacker to access data and perform administrator-only functions, potentially leading to privilege escalation. The available...

CVE-2025-23058 Authenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management Interface

A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged read-only authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges...

CVE-2025-23058 Authenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management Interface

A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged read-only authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges...

CVE-2025-23059: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive...

PT-2025-4800 · Aruba Networks · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged read-only authenticated remote attacker to gain unauthorized access t...

Hewlett Packard Enterprise Aruba Networking ClearPass Policy Manager 安全漏洞

Hewlett Packard Enterprise Aruba Networking ClearPass Policy Manager is a network access control NAC solution from Hewlett Packard Enterprise USA that is primarily used to manage and protect devices in corporate networks access. A security vulnerability exists in Hewlett Packard Enterprise Aruba...

CVE-2025-23060: Cleartext Transmission of Sensitive Information

A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources a...

CVE-2025-23058: Weak Authentication

A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged read-only authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges...

CVE-2025-25039: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager CPPM allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on...

PT-2025-4801

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking ClearPass Policy Manager affected versions not specified Description A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive...

Hewlett Packard Enterprise ClearPass Policy Manager 安全漏洞

Hewlett Packard Enterprise ClearPass Policy Manager is a wireless network security access management system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise ClearPass Policy Manager. An attacker could exploit the vulnerability to perform a...

PT-2025-4803

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking ClearPass Policy Manager affected versions not specified Description A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting...

Hewlett Packard Enterprise Aruba Networking ClearPass Policy Manager 安全漏洞

Hewlett Packard Enterprise Aruba Networking ClearPass Policy Manager is a network access control NAC solution from Hewlett Packard Enterprise USA that is primarily used to manage and protect devices in corporate networks access. A security vulnerability exists in Hewlett Packard Enterprise Aruba...

Hewlett Packard Enterprise ClearPass Policy Manager 安全漏洞

Hewlett Packard Enterprise ClearPass Policy Manager is a wireless network security access management system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise ClearPass Policy Manager. An attacker could exploit this vulnerability to execute arbitrar...