CVE-2025-23058highCWE-1390

CVE-2025-23058: high-severity vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba…

Authenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management Interface

Published · Updated

Follow this CVE+ Monitor HPE Aruba Networking ClearPass Policy Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.7%
In short

A read-only user in ClearPass Policy Manager can bypass access controls to perform administrator functions they shouldn't be allowed to do. This lets them make unauthorized changes and gain higher privileges than intended.

Technical detail

Authenticated users with read-only privileges can exploit broken access control in the web management interface to execute administrative functions and access restricted data. The vulnerability stems from inadequate privilege validation, allowing horizontal and vertical privilege escalation without requiring additional credentials.

Summary generated and translated by AI from the official description.
A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authenticated remote attacker to gain unauthorized access to data and the ability to execute functions that should be restricted to administrators only with read/write privileges. Successful exploitation could enable a low-privileged user to execute administrative functions leading to an escalation of privileges.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking ClearPass Policy Manager
Related CVEs — Hewlett Packard Enterprise (HPE) HPE Aruba…

In the same product, most dangerous first.

CVE-2024-51771HIGHAuthenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management InterfaceEPSS 0.8%CVE-2025-25039MEDIUMAuthenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management InterfaceEPSS 0.6%CVE-2025-23059MEDIUMSensitive Information Disclosure in HPE Aruba Networking ClearPass Policy ManagerEPSS 0.6%CVE-2024-51772MEDIUMAuthenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a Remote Command Execution (RCE)EPSS 0.5%CVE-2024-53672MEDIUMAuthenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management InterfaceEPSS 0.4%CVE-2024-51773MEDIUMAuthenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management InterfaceEPSS 0.3%