PT-2019-9072

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager versions 10.2.1.603 and earlier Description The issue allows an attacker who can edit file permissions to bypass access restrictions and execute blocked applications. Recommendations For versions 10.2.1.603...

CVE-2018-14894: Improper Privilege Management

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker who is able to edit permissions of a file to bypass intended access restrictions and execute blocked applications...

CVE-2019-9627

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path...

Buffer overflow

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path...

CVE-2019-9627

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path...

CVE-2019-9627

CVE-2019-9627 affects CyberArk Endpoint Privilege Manager (EPM) with the kernel driver CybKernelTracker.sys. A buffer overflow in the non-paged pool occurs when loading an image (e.g., DLL) with a long path, on EPM versions prior to 10.7. This can allow an unprivileged user (no Administrator righ...

PT-2019-19763

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager versions prior to 10.7 Description A buffer overflow in the kernel driver CybKernelTracker.sys allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an...

CVE-2019-9627: Out-of-bounds Write

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path...

CVE-2019-9627

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path. Recent assessments:...

Hack Allows Escape of Play-with-Docker Containers

Researchers hacked the Docker test platform called Play-with-Docker, allowing them to access data and manipulate any test Docker containers running on the host system. The proof-of-concept hack does not impact production Docker instances, according to CyberArk researchers that developed the...

CyberArk 9.7 - Memory Disclosure Exploit

Exploit Title: CyberArk 9.7 - Memory Disclosure Exploit Author: Thomas Zuk @Freakazoidile Vendor Homepage: https://www.cyberark.com/products/privileged-account-security-solution/enterprise-password-vault/ Version: 9.7 and 10 Tested on: Windows 2008, Windows 2012, Windows 7, Windows 8, Windows 10...

CyberArk 9.7 - Memory Disclosure

Exploit Title: CyberArk 9.7 - Memory Disclosure Date: 2018-06-04 Exploit Author: Thomas Zuk @Freakazoidile Vendor Homepage: https://www.cyberark.com/products/privileged-account-security-solution/enterprise-password-vault/ Version: 9.7 and 10 Tested on: Windows 2008, Windows 2012, Windows 7, Windo...

CyberArk 9.7 - Memory Disclosure

CyberArk 9.7 - Memory Disclosure Exploit Title: CyberArk 9.7 - Memory Disclosure Date: 2018-06-04 Exploit Author: Thomas Zuk @Freakazoidile Vendor Homepage: https://www.cyberark.com/products/privileged-account-security-solution/enterprise-password-vault/ Version: 9.7 and 10 Tested on: Windows 200...

Kibana ESA-2018-18

Nethanel Coppenhagen of CyberArk Labs discovered Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to...

CyberArk Endpoint Privilege Manager Elevation of Privilege Vulnerability

CyberArk Endpoint Privilege Manager formerly Viewfinity is a privilege management software from CyberArk Software. The software includes features such as privilege management, application control, and credential loss protection. A security vulnerability exists in CyberArk Endpoint Privilege...

Privilege escalation

In CyberArk Endpoint Privilege Manager formerly Viewfinity, Privilege Escalation is possible if the attacker has one process that executes as Admin...

CVE-2018-13052

In CyberArk Endpoint Privilege Manager formerly Viewfinity, Privilege Escalation is possible if the attacker has one process that executes as Admin...

CVE-2018-13052

In CyberArk Endpoint Privilege Manager formerly Viewfinity, Privilege Escalation is possible if the attacker has one process that executes as Admin...

CVE-2018-13052

CVE-2018-13052 affects CyberArk Endpoint Privilege Manager (formerly Viewfinity). It enables privilege escalation if an attacker has one process running as Admin, allowing escalation to higher privileges. Connected sources indicate a high-severity (CVSSv3: 9.8, CRITICAL) vulnerability with networ...

PT-2018-11560

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager affected versions not specified Description The issue allows for Privilege Escalation if an attacker has a process executing as Admin. Recommendations At the moment, there is no information about a newer...