Design/Logic Flaw

CyberArk Endpoint Privilege Manager EPM 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database...

CVE-2020-25738: Uncontrolled Search Path Element

CyberArk Endpoint Privilege Manager EPM 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database...

PT-2020-16178

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager EPM version 11.1.0.173 Description The issue allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process...

Cyberark Software Endpoint Privilege Manager Code Issue Vulnerability

Cyberark Software CyberArk Software Endpoint Privilege Manager formerly Viewfinity is a privilege management software from CyberArk Software Cyberark Software, Israel. The software includes features such as privilege management, application control, and credential loss protection. A security...

CyberArk Software CyberArk Endpoint Privilege Manager Access Bypass Vulnerability

CyberArk Software Endpoint Privilege Manager formerly Viewfinity is a privilege management software from CyberArk Software, Israel. The software includes features such as privilege management, application control, and credential loss protection. A security vulnerability exists in CyberArk Softwar...

CVE-2018-14894

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker who is able to edit permissions of a file to bypass intended access restrictions and execute blocked applications...

CVE-2018-14894

CVE-2018-14894 affects CyberArk Endpoint Privilege Manager (EPM) 10.2.1.603 and earlier. The vulnerability lets an attacker who can edit a file’s permissions bypass access restrictions and execute applications that EPM would block. Public exploitation details in connected sources describe bypass ...

PT-2019-9072

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager versions 10.2.1.603 and earlier Description The issue allows an attacker who can edit file permissions to bypass access restrictions and execute blocked applications. Recommendations For versions 10.2.1.603...

CVE-2018-14894: Improper Privilege Management

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker who is able to edit permissions of a file to bypass intended access restrictions and execute blocked applications...

Buffer overflow

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path...

CVE-2019-9627

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path...

CVE-2019-9627

CVE-2019-9627 affects CyberArk Endpoint Privilege Manager (EPM) with the kernel driver CybKernelTracker.sys. A buffer overflow in the non-paged pool occurs when loading an image (e.g., DLL) with a long path, on EPM versions prior to 10.7. This can allow an unprivileged user (no Administrator righ...

PT-2019-19763

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager versions prior to 10.7 Description A buffer overflow in the kernel driver CybKernelTracker.sys allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an...

CVE-2019-9627: Out-of-bounds Write

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path...

CVE-2019-9627

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker without Administrator privileges to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path. Recent assessments:...

CyberArk Endpoint Privilege Manager Elevation of Privilege Vulnerability

CyberArk Endpoint Privilege Manager formerly Viewfinity is a privilege management software from CyberArk Software. The software includes features such as privilege management, application control, and credential loss protection. A security vulnerability exists in CyberArk Endpoint Privilege...

Privilege escalation

In CyberArk Endpoint Privilege Manager formerly Viewfinity, Privilege Escalation is possible if the attacker has one process that executes as Admin...

CVE-2018-13052

In CyberArk Endpoint Privilege Manager formerly Viewfinity, Privilege Escalation is possible if the attacker has one process that executes as Admin...

CVE-2018-13052

In CyberArk Endpoint Privilege Manager formerly Viewfinity, Privilege Escalation is possible if the attacker has one process that executes as Admin...

CVE-2018-13052

CVE-2018-13052 affects CyberArk Endpoint Privilege Manager (formerly Viewfinity). It enables privilege escalation if an attacker has one process running as Admin, allowing escalation to higher privileges. Connected sources indicate a high-severity (CVSSv3: 9.8, CRITICAL) vulnerability with networ...