CVE-2026-79797

Summary

The flaw is an improper access control vulnerability in the Android client application for HPE Networking ClearPass Policy Manager, allowing unauthenticated attackers to obtain sensitive information with user interaction. This matters because it exposes sensitive data to unauthorized access, compromising user privacy and security.

Exploitability

Exploitation requires user interaction and is moderately difficult, as the attacker must trick the user into performing the necessary actions.

Blast radius

If exploited, the impact could be significant, as it allows an attacker to obtain sensitive information from affected users, potentially leading to data breaches and privacy violations.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected Android client application until a patch is available or upgrade to the latest version of the ClearPass Policy Manager application.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.