PT-2025-30505 · Poly · Poly Clariti Manager

Published 2025-07-22 · Updated 2025-07-23 · CVE-2025-43487

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Poly Clariti Manager versions prior to 10.12.2

Description A privilege escalation issue has been identified in Poly Clariti Manager. The flaw stems from improper implementation of access controls through Sudo, potentially allowing unauthorized privilege escalation.

Recommendations Update Poly Clariti Manager to version 10.12.2 or later.

Fix

LPE

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2025-13554

CVE-2025-43487

Affected Products

Poly Clariti Manager

References · 9

• https://bdu.fstec.ru/vul/2025-13554 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-43487 · Security Note
• https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43487 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1947834970195575007 · Twitter Post
• https://t.me/cvetracker/28436 · Telegram Post
• https://t.me/cveNotify/129930 · Telegram Post
• https://twitter.com/CVEnew/status/1947808268837130409 · Twitter Post
• https://t.me/CVEtracker/28436 · Telegram Post