CVE-2026-79798: Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
ClearPass Policy Manager instances with the web-based management interface accessible to a remote attacker are exposed if that attacker has a low-privileged authenticated account. No user interaction is required.
What level of access does an attacker need?
An attacker must authenticate to the ClearPass Policy Manager web-based management interface with low privileges. The issue is remotely exploitable with low attack complexity.
What could successful exploitation allow?
Successful exploitation could allow the authenticated attacker to execute arbitrary database commands against the ClearPass Policy Manager instance. The reported impact includes high confidentiality, integrity, and availability impact, with scope changed.