CVE-2024-42337 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42337

Technical details (affected products/versions, root cause, impact or remediation) for CVE-2024-42337 are not publicly available in the provided documents. Monitor for updates from official advisories.

CyberArk Identity Management 信息泄露漏洞

CyberArk Identity Management is an identity management program from CyberArk Israel. CyberArk Identity Management has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

PT-2024-29877 · Cyberark · Cyberark

Name of the Vulnerable Software and Affected Versions: CyberArk affected versions not specified Description: The issue concerns the exposure of sensitive information to an unauthorized actor, classified as CWE-200. There is no information provided about the estimated number of potentially affecte...

PT-2024-29879 · Cyberark · Cyberark

Name of the Vulnerable Software and Affected Versions: CyberArk affected versions not specified Description: The issue concerns the exposure of sensitive information to an unauthorized actor. This is a critical vulnerability that affects CyberArk, allowing unauthorized access to confidential data...

CyberArk Identity Management 安全漏洞

CyberArk Identity Management is an identity management program from CyberArk Israel. CyberArk Identity Management suffers from a security vulnerability that stems from client-side execution of server-side security. No detailed vulnerability details are provided at this time...

CyberArk Identity Management 信息泄露漏洞

CyberArk Identity Management is an identity management program from CyberArk Israel. CyberArk Identity Management has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

CyberArk Identity Management 信息泄露漏洞

CyberArk Identity Management is an identity management program from CyberArk Israel. CyberArk Identity Management has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

PT-2024-29878 · Cyberark · Cyberark

Name of the Vulnerable Software and Affected Versions: CyberArk affected versions not specified Description: The issue concerns the exposure of sensitive information to an unauthorized actor. This is a case of CWE-200, which involves the exposure of confidential information. Recommendations: At t...

PT-2024-5772 · Cyberark · Cyberark Identity Management

Name of the Vulnerable Software and Affected Versions: CyberArk affected versions not specified Description: The issue is related to the implementation of security functions on the client-side in CyberArk Identity Management, which can be exploited by a remote attacker to elevate their privileges...

Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking

The cryptojacking group known as Kinsing has demonstrated an ability to continuously evolve and adapt, proving to be a persistent threat by swiftly integrating newly disclosed vulnerabilities to the exploit arsenal and expand its botnet. The findings come from cloud security firm Aqua, which...

CVE-2017-11197

In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within the "add printer" option...

CVE-2017-11197

In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within the "add printer" option...

Design/Logic Flaw

In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within the "add printer" option...

CVE-2017-11197

In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within the "add printer" option...

CVE-2017-11197

Affected software. CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220. Issue. A bug in the "+add printer" option allows a low-privilege user to escalate to administrative privileges. Root cause (as stated). Local privilege escalation inside Viewfinity due to the add printer flow. Impact. Priv...

CVE-2017-11197

In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within the "add printer" option...

Exploit for Incorrect Permission Assignment for Critical Resource in Mobyproject Moby

CVE-2021-41091 This exploit offers an in-depth look at the CV...

Exploit for CVE-2022-25365

CVE-2022-25365 The privilege escalation vulnerability in Doc...

GHSA-R6V9-P59M-GJ2P Indy's NODE_UPGRADE transaction vulnerable to remote code execution

Impact The pool-upgrade request handler in Indy-Node =1.12.5 as soon as possible. Patches The pool-upgrade request handler in Indy-Node =1.12.5 has been updated to properly authenticate pool-upgrade transactions before any processing is performed by the request handler. The transactions are furth...