CVE-2023-25594 — Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface
A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the C…
Published: 2023-03-14 · CVSS: 6.3 · CVSS 3.1
A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of this vulnerability allows an attacker to complete state-changing actions in the web-based management interface that should not be allowed by their current level of authorization on the platform.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7