CVE-2021-37151

CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals whether the username is valid. In certain authentication policy configurations with MFA, the API response length can be used to differentiate between a valid user and an invalid one aka Username...

CVE-2021-37151

CyberArk Identity 21.5.131 is affected by a username-enumeration flaw. When handling an invalid authentication attempt and under certain MFA-enabled policy configurations, the API response length can differ between valid and invalid usernames, enabling an attacker to enumerate valid user accounts...

CyberArk Identity 授权问题漏洞

CyberArk CyberArk Identity is CyberArk's provides the most complete identity security platform to secure all identities end-to-end. A security vulnerability exists in CyberArk Identity 21.5.131, which can be exploited by an attacker to obtain a username or password...