CVE-2026-79797 — Improper Access Control in HPE Networking ClearPass Android Client Application

CVE-2026-79797

Improper Access Control in HPE Networking ClearPass Android Client Application PUBLISHED

Description (CNA)

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)	affected 6.14.0 through 6.14.0; affected 6.11.0 through 6.11.15

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.