← Database

CVE-2023-25589

CRITICAL CVSS: 9.8 Published: 2023-03-22 Modified: 2026-06-17

Description

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise.

Affected Platforms

Arubanetworks Clearpass Policy Manager

Weakness Type

NVD-CWE-Other, CWE-306

References