CVE-2023-43508

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Oct 25, 2023
Updated: Nov 1, 2023
CWE ID 863

Summary

CVE-2023-43508 refers to a set of vulnerabilities in ClearPass Policy Manager's web-based interface. With read-only access, an attacker can manipulate the system and make state-changing actions that are not authorized for their level of privileges. The impact of these vulnerabilities allows unintended modifications to the ClearPass Policy Manager instance.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Clearpass Policy Manager

Affected Vendors

  • Aruba Networks