Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-79807

Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on the local system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)

Default version status: affected

  • 6.14.0 to ≤ 6.14.0affected
  • 6.11.0 to ≤ 6.11.15affected

References