The vulnerability allows an authenticated remote attacker to execute processes with root privileges on a ClearPass OnGuard deployment. This elevation can lead to full control of the system, providing possibility to alter configurations, exfiltrate sensitive data and deploy malicious code. The weakness is an improper privilege escalation flaw.

Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) is affected. No specific version range was disclosed in the data, so all installations using the OnGuard agent should verify if they are running a vulnerable version.

The CVSS score of 6.5 indicates a moderate severity. EPSS data is not available, so the current exploitation probability is unknown. The vulnerability is not listed in CISA’s KEV catalog, but it requires valid credentials to launch the attack, making it a risk for compromised user accounts or insider threat actors. An attacker could potentially move laterally after gaining root access.