Description

A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote Attacker to conduct a stored cross-site scripting (XSS) attack. Successful exploitation could enable a threat actor to perform any actions the user is authorized to do, including accessing the user's data and altering information within the user's permissions. This could lead to data modification, deletion, or theft, including unauthorized access to files, file deletion, or the theft of session cookies, which an attacker could use to hijack a user's session.

INFO

Published Date :

2024-12-03T20:11:03.981Z

Last Modified :

2024-12-03T21:56:04.237Z

Source :

hpe
AFFECTED PRODUCTS

The following products are affected by CVE-2024-51773 vulnerability.

Vendors Products
Arubanetworks
  • Clearpass Policy Manager
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-51773.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact