We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-41916

Authenticated Sensitive Information Disclosure in ClearPass Policy Manager



Description

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

Reserved 2024-07-23 | Published 2024-07-30 | Updated 2024-10-28 | Assigner hpe


MEDIUM: 6.8CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Product status

Default status
unaffected

ClearPass Policy Manager 6.12.1 and below
affected

ClearPass Policy Manager 6.11.8 and below
affected

Credits

Security Team at Quinstreet Inc. finder

References

support.hpe.com/...y?docId=hpesbnw04675en_us&docLocale=en_US

cve.org (CVE-2024-41916)

nvd.nist.gov (CVE-2024-41916)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-41916

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.