CVE-2026-79805: Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager
An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The issue is authenticated, so an attacker needs valid ClearPass Policy Manager credentials. No additional privileges or user interaction are indicated.
What could exploitation allow an attacker to do?
A successful attack could allow the authenticated attacker to read and modify certain files on the underlying operating system. The reported impact includes high confidentiality, integrity, and availability impact.
Is the vulnerable configuration or affected version range identified?
No affected versions, fixed versions, or configuration prerequisites are provided in the available data. The vendor advisory referenced in the record is the source to consult for product-specific remediation details.