This vulnerability exposes an authenticated path traversal flaw in ClearPass Policy Manager. An attacker who obtains legitimate credentials can craft input that causes the system to reference files outside the intended directory structure, allowing the attacker to read sensitive files or write to critical system files. The result is a compromise of confidentiality, integrity, and potentially availability of the underlying operating system. The description explicitly notes that successful exploitation could read and modify certain operating‑system files.

The only vendor product listed is Hewlett Packard Enterprise ClearPass Policy Manager. No specific version information is provided, so any deployed instance may be affected until an official patch is applied.

The CVSS score of 9.8 indicates a high‑severity exploit with full user impact. Although the EPSS score is not available and the vulnerability is not in the CISA KEV catalog, the combination of required authentication and potential to alter system files suggests a high likelihood of exploitation in environments where attackers can acquire credentials. The attack vector is inferred to be authenticated, meaning that internal or compromised user accounts could act as a launchpad for the traversal and subsequent file manipulation.