Cyber Resilience

CVE-2024-5486

Medium

Published: 30 July 2024

Published
30 July 2024
Modified
21 November 2024
KEV Added
Patch
CVSS Score v3.1 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS Score 0.0040 61.3th percentile
Risk Priority 12 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-5486 is a medium-severity an unspecified weakness vulnerability in Arubanetworks Clearpass Policy Manager. Its CVSS base score is 5.8 (Medium).

Operationally, ranked in the top 38.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further…

more

access to network services supported by ClearPass Policy Manager

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

arubanetworks
clearpass policy manager
6.12.0, 6.12.1 · 6.11 — 6.11.8

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References