NetSight
high7.8

CVE-2023-25590

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role.

Impact

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.

Affected products

VendorProductAffected versions
ArubanetworksClearpass Policy Manager
from 6.9.0 through 6.9.13
from 6.10.0 through 6.10.8
Versions 6.11.0, 6.11.1

Weakness classification

References