VULNERABILITY INTELLIGENCE

CVE-2025-23058

CVSS score8.8 HIGH
EPSS probability0.72%
CISA KEVNot currently listed
Published2025-02-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges. Successful exploitation could enable a low-privileged user to execute administrative functions leading to an escalation of privileges.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-1390

Primary references