CVE-2023-25595 — Sensitive Information Disclosure in ClearPass OnGuard Ubuntu Agent

Description (CNA)

A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful Exploitation of this vulnerability allows an attacker to retrieve information that is of a sensitive nature to the ClearPass/OnGuard environment.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Aruba ClearPass Policy Manager	affected 6.11.1 and below; affected 6.10.8 and below; affected 6.9.13 and below

CWE

No CWE identifiers supplied.

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt

ADP enrichment

CVE

No English description supplied.

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt

CISA-ADP

No English description supplied.

No references supplied.