CVE-2023-43507

CVE-2023-43507 affects Aruba Networks ClearPass Policy Manager web-based management interface. Affected: authenticated user can trigger SQL injection via the web UI, potentially leaking or modifying data and risking complete cluster compromise. Documents confirm the vulnerability and its impact; ...

CVE-2023-43507 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in...