CVE-2022-23669

CVE-2022-23669 is a remote authorization bypass vulnerability affecting Aruba ClearPass Policy Manager versions 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, and 6.7.x and below. This high-severity vulnerability (CVSS 8.8) allows an authenticated attacker to bypass authorization controls over a network with low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Aruba has released updates to address this vulnerability.