CVE-2023-25589 — Unauthenticated Arbitrary User Creation Leads to Complete System Compromise
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A suc…
Published: 2023-03-14 · CVSS: 9.8 · CVSS 3.1
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7