The vulnerability allows a local user with limited privileges to execute commands with elevated privileges if conditions that are external to the attacker exist. The exploit grows the attacker’s privilege level on the hosting system, potentially compromising confidentiality, integrity, and availability of the system’s data and services. It is an Elevation of Privilege (CWE‑269) issue.

Hewlett Packard Enterprise ClearPass Policy Manager software is affected.

This issue has a CVSS score of 6.7, indicating a moderate severity. The EPSS score is 0.00093, and the incident is not listed in CISA KEV. The attack vector is local; an adversary must already have physical or local console access to the machine to exploit the flaw. No public exploit has been documented, and the conditions required for exploitation remain partially undisclosed.