Описание
CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database.
Ссылки
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cyberark:endpoint_privilege_manager:11.1.0.173:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.0006
Низкий
5.5 Medium
CVSS3
1.9 Low
CVSS2
Дефекты
CWE-427
Связанные уязвимости
github
больше 3 лет назад
CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database.
EPSS
Процентиль: 19%
0.0006
Низкий
5.5 Medium
CVSS3
1.9 Low
CVSS2
Дефекты
CWE-427