The vulnerability exists in the web interface of ClearPass Policy Manager, inferred from the description that it is an affected interface and the nature of the bypass—this detail is not explicitly stated in the CVE data. An unauthenticated attacker could bypass all existing authentication controls, thereby gaining unauthorized access to the system. The primary impact would be the ability for the attacker to operate with privileged rights, potentially compromising configuration, policy, or network security settings, which represents a serious confidentiality and integrity breach.

The affected product is Hewlett Packard Enterprise's ClearPass Policy Manager. No specific versions are listed, so all installations of the product are potentially vulnerable until a patch is applied.

The CVSS score of 9.8 indicates a critical severity. Because the vulnerability can be exploited remotely through the interface and the EPSS score is less than 1%, the probability of exploitation is very low but not zero, indicating a comparatively rare but still present threat. A public patch is documented in the HPE support document, so remediation is possible. Based on the description, it is inferred that an attacker could readily target the exposed interface. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, but the high score warrants immediate action.