PT-2023-20186 · Aruba · Clearpass Onguard

Published 2023-03-14 · Updated 2025-02-27 · CVE-2023-25595

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ClearPass OnGuard Ubuntu agent (affected versions not specified)

Description A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful exploitation of this issue allows an attacker to retrieve information that is of a sensitive nature to the ClearPass/OnGuard environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-25595

Affected Products

Clearpass Onguard

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-25595 · Security Note
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2023-003.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-25595 · Vendor Advisory
• https://t.me/cvenotify/47012 · Telegram Post
• https://t.me/cvenotify/112685 · Telegram Post