Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-79797

Improper Access Control in HPE Networking ClearPass Android Client Application

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

Default version status: affected

  • 6.14.0 to ≤ 6.14.0affected
  • 6.11.0 to ≤ 6.11.15affected

References