PT-2019-9072 · Cyberark · Cyberark Endpoint Privilege Manager

Alpcan Onaran + 1 · Publicado 2019-04-09 · Atualizado 2019-10-03 · CVE-2018-14894

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CyberArk Endpoint Privilege Manager versions 10.2.1.603 and earlier

Description The issue allows an attacker who can edit file permissions to bypass access restrictions and execute blocked applications.

Recommendations For versions 10.2.1.603 and earlier, update to a version later than 10.2.1.603 to resolve the issue.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2018-14894

Produtos afetados

Cyberark Endpoint Privilege Manager

Referências · 6

• 🔥 https://exploit-db.com/exploits/46688 · Exploit
• 🔥 https://youtube.com/watch?v=B0VpK0poTco · Exploit
• 🔥 https://mustafakemalcan.com/cyberark-epm-file-block-bypass-cve-2018-14894 · Exploit
• 🔥 http://packetstormsecurity.com/files/152489/CyberArk-EPM-10.2.1.603-Security-Restrictions-Bypass.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-14894 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-14894 · Aviso do Fabricante