Medium severity6.6NVD Advisory· Published Feb 4, 2025· Updated Jun 17, 2026
CVE-2025-23060
CVE-2025-23060
Description
A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources as well as enabling data tampering.
Affected products
3- cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*Range: >=6.11.0,<6.11.10
- Hewlett Packard Enterprise (HPE)/HPE Aruba Networking ClearPass Policy Managerv5Range: 6.12.0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
0No linked articles in our index yet.