CyberArk

Records38All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

CyberArk records in CISA KEV

No CyberArk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Endpoint Privilege Manager 8 records MEDIUM Identity 6 records LOW Conjur 5 records MEDIUM Credential Provider 3 records LOW Password Vault 2 records MEDIUM Conjur Oss Helm Chart 1 record MEDIUM Conjur Service Broker 1 record LOW Enterprise Password Vault 1 record HIGH

Records

3 records in Credential Provider · all components

TI-2021-11795 CVE-2021-31796 · GHSA-75qm-m8r5-4ccg

An inadequate encryption vulnerability discovered in CyberArk Credential Provider before…

LOW 36

An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01763 Published 2021-09-02 No fix listed CWE-327

TI-2021-11796 CVE-2021-31797 · GHSA-r8wh-8j3r-h3qr

The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is…

LOW 23

The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to password disclosure.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00344 Published 2021-09-01 No fix listed CWE-331

TI-2021-11797 CVE-2021-31798 · GHSA-gghc-6wpq-rr46

The effective key space used to encrypt the cache in CyberArk Credential Provider prior…

LOW 21

The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00437 Published 2021-09-02 No fix listed CWE-331

Open these records in search →

Critical	7
High	12
Medium	16
Low	3
No CVSS	0