← Database

CVE-2025-23060

MEDIUM CVSS: 6.6 Published: 2025-02-04 Modified: 2026-06-17

Description

A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources as well as enabling data tampering.

Affected Platforms

Arubanetworks Clearpass Policy Manager

Weakness Type

CWE-319

References