CVE-2020-25738

2020-11-2705:50:03

mitre

www.cve.org

cyberark

credential theft

dll injection

chrome process

sqlite database

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

40.0%

JSON

CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database.