7.3
Élevée
CVE-2026-79809 An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager
Description
An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ClearPass Policy Manager (CPPM) | 6.14.0 | Pas de correctif indiqué |
| ClearPass Policy Manager (CPPM) 6.11 | 6.11.0 → 6.11.15 | Pas de correctif indiqué |
Autres CVE de ClearPass Policy Manager (CPPM)
Les 36 CVE de ClearPass Policy Manager (CPPM) →
CVE-2026-79818
A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to…
5.3
Moyenne
CVE-2026-79817
A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy…
5.5
Moyenne
CVE-2026-79815
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote…
6.5
Moyenne
CVE-2026-79816
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote…
5.4
Moyenne