Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-25590

Local Privilege Escalation in ClearPass OnGuard Linux Agent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Default version status: unaffected

  • 6.11.1 and belowaffected
  • 6.10.8 and belowaffected
  • 6.9.13 and belowaffected

References