CVE-2026-79809: CVE-2026-79809: dizin geçişi

Açıklama (NVD)

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.

Özet bilgiler

CVSS v3.1

7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

%0,31 (yüzdelik 24)

CWE

CWE-22

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• support.hpe.com
• CWE-22