Local privilege escalation via arbitrary file write

Arbitrary file write in the ClearPass Policy Manager OnGuard agent allows local users to execute code with elevated privileges. HPE has not publicly identified the file-write operation, the input it accepts, or how that write crosses a privilege boundary. Exploitation requires a local instance and preconditions outside the attacker's control; successful exploitation grants elevated code execution on that host.