CVE-2026-73789 — Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface

CVE-2026-73789

Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface PUBLISHED

Description (CNA)

A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized prolonged use of network resources.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)	affected 6.12.0 through 6.12.8; affected 6.11.0 through 6.11.14

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05130en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.