BaseFortify

Executive Summary

This is a privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent. It allows malicious users on a Linux system to gain higher user privileges. If exploited successfully, an attacker can escalate their privileges to root access on the affected Linux client.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if the ClearPass Policy Manager OnGuard Linux agent is installed on affected systems. Verify agent version and configuration for known vulnerable builds. Look for unusual privilege escalation attempts or root access logs on Linux clients.

Useful 0 Not Useful 0

Impact Analysis

If you use the ClearPass Policy Manager OnGuard Linux agent, an attacker with local access could exploit this flaw to gain full control over your Linux system. This could lead to unauthorized data access, system manipulation, or further network compromise.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized privilege escalation to root access on affected Linux clients. Such access may lead to unauthorized data access, modification, or exfiltration, violating confidentiality and integrity requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for the ClearPass Policy Manager OnGuard Linux agent to address the privilege escalation vulnerability.

Useful 0 Not Useful 0