Technical impact
The vulnerability allows an authenticated remote attacker to execute processes with root privileges on a ClearPass OnGuard deployment. This elevation can lead to full control of the system, providing possibility to alter configurations, exfiltrate sensitive data and deploy malicious code. The weakness is an improper privilege escalation flaw.
Affected Systems
Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) is affected. No specific version range was disclosed in the data, so all installations using the OnGuard agent should verify if they are running a vulnerable version.
Risk and Exploitability
The CVSS score of 6.5 indicates a moderate severity. EPSS data is not available, so the current exploitation probability is unknown. The vulnerability is not listed in CISA’s KEV catalog, but it requires valid credentials to launch the attack, making it a risk for compromised user accounts or insider threat actors. An attacker could potentially move laterally after gaining root access.
