CVE-2022-23669

Aruba ClearPass Policy Manager contains a remote authentication/authorization bypass vulnerability (CVE-2022-23669) affecting versions 6.10.4 and below, 6.9.9 and below, 6.8.9‑HF2 and below, and 6.7.x and below. The root cause involves improper handling of SAML token expiration, enabling an attac...