Poly Clariti Manager Default Password Information Disclosure Vulnerability

A vulnerability allowing the use and retrieval of the default password has been identified in Poly Clariti Manager versions prior to 10.12.1. This issue could lead to unauthorized access or actions within the application. HP has released a patch for this vulnerability in the latest software update.

Impact

Exploitation of this vulnerability could result in unauthorized access to the application, potentially allowing for further actions or access within the Poly Clariti Manager environment.

Remediation

Users are advised to update to version 10.12.2 or later. The latest builds can be obtained through the Poly Lens Management Console. After accessing the console, navigate to the 'Product Catalog' section for Clariti Manager and select the 'rprm10.12.2 bin' file.