Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected system, thereby enabling the attacker to perform privileged actions and potentially compromise the confidentiality, integrity, and availability of the network infrastructure.

Hewlett Packard Enterprise ClearPass Policy Manager. No specific affected versions are listed, so all releases prior to a future patch are potentially vulnerable.

The CVSS score of 9.8 categorizes this flaw as Critical, indicating that a successful attack could provide full administrative control over the device. The EPSS score is not available, so current public exploitation likelihood is unclear, but absence from the KEV catalog means no documented exploited attacks yet. The likely attack vector is remote access via the web or API interface, inferred from the description of web-based management and API interfaces.