Cyber Resilience

CVE-2024-41916

Medium

Published: 30 July 2024

Published
30 July 2024
Modified
21 November 2024
KEV Added
Patch
CVSS Score v3.1 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS Score 0.0040 61.3th percentile
Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-41916 is a medium-severity an unspecified weakness vulnerability in Arubanetworks Clearpass Policy Manager. Its CVSS base score is 6.8 (Medium).

Operationally, ranked in the top 38.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further…

more

access to network services supported by ClearPass Policy Manager.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

arubanetworks
clearpass policy manager
6.12.0, 6.12.1 · ≤ 6.11.8

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References