CVE-2025-23060

Summary

CVE-2025-23060 is a vulnerability affecting HPE Aruba Networking ClearPass Policy Manager. This issue exposes sensitive information in an unencrypted state, increasing the risk of man-in-the-middle attacks. An attacker exploiting this vulnerability could potentially gain unauthorized access to network resources and enable data tampering. The vulnerability can be triggered under specific circumstances, making it a significant security concern for organizations using the affected product. Organizations are advised to apply the available patches promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.