Advisoriesby IbisHewlett Packard EnterpriseCVE-2026-73789
Hewlett Packard Enterprise ClearPass: unauthenticated remote attacker could...
No fix yet
A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| ClearPass Policy Manager (CPPM) Product | >= 6.12.0, <= 6.12.8 | No fix yet |
| >= 6.11.0, <= 6.11.14 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-284