← Back

CVE-2022-43540

nvd nist
Published: Jan 5, 2023Modified: Apr 10, 2025

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that is of a sensitive nature in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.

Affected (2)

Arubanetworks
1 product
Clearpass Policy Manager
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Arubanetworks
Clearpass Policy Manager
From 6.10.0 to 6.10.7
Clearpass Policy Manager
From 6.9.0 to 6.9.12
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: security-alert@hpe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.