← Back

CVE-2023-25590

nvd nist
Published: Mar 22, 2023Modified: Feb 27, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.

Affected (4)

Arubanetworks
1 product
Clearpass Policy Manager
Configuration A
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Arubanetworks
Clearpass Policy Manager
From 6.10.0 to 6.10.8
Clearpass Policy Manager
From 6.9.0 to 6.9.13
Clearpass Policy Manager
Version 6.11.0
Clearpass Policy Manager
Version 6.11.1
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: security-alert@hpe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.