CVE-2025-23058 | BDVDB-2026-265358 Detail

Description#

A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges. Successful exploitation could enable a low-privileged user to execute administrative functions leading to an escalation of privileges.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-02-04Record published in the CVE List.
2. Version 22025-03-13Most recent update recorded in the CVE List.