{"id":"CVE-2026-79797","published":"2026-10-06T20:17:31.197","lastModified":"2026-10-08T04:17:43.160","description":"An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-284"],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is an improper access control vulnerability in the Android client application for HPE Networking ClearPass Policy Manager, allowing unauthenticated attackers to obtain sensitive information with user interaction. This matters because it exposes sensitive data to unauthorized access, compromising user privacy and security.","exploitability":"Exploitation requires user interaction and is moderately difficult, as the attacker must trick the user into performing the necessary actions.","blast_radius":"If exploited, the impact could be significant, as it allows an attacker to obtain sensitive information from affected users, potentially leading to data breaches and privacy violations.","remediation":"Disable the affected Android client application until a patch is available or upgrade to the latest version of the ClearPass Policy Manager application.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","info-leak","mobile","android"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:41:47.127Z"}}