CVE-2025-23058 — Authenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management Interface
A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to d…
Published: 2025-02-04 · CVSS: 8.8 · CVSS 3.1
A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges. Successful exploitation could enable a low-privileged user to execute administrative functions leading to an escalation of privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7