PT-2021-19515 · Cyberark · Cyberark Credential Provider

Klayton Monroe · Published 2021-09-02 · Updated 2022-07-12 · CVE-2021-31798

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CyberArk Credential Provider versions prior to 12.1

Description The issue is related to the low entropy of the effective key space used to encrypt the cache in CyberArk Credential Provider. Under certain conditions, a local malicious user can obtain the plaintext of cache files.

Recommendations For versions prior to 12.1, update to version 12.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-331

Related Identifiers

CVE-2021-31798

Affected Products

Cyberark Credential Provider

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2021-31798 · Security Note
• https://osv.dev/vulnerability/CVE-2021-31798 · Vendor Advisory
• https://t.me/cvenotify/20546 · Telegram Post
• http://seclists.org/fulldisclosure/2021/Sep/3 · Note
• http://packetstormsecurity.com/files/164035/CyberArk-Credential-Provider-Local-Cache-Decryption.html · Note
• https://t.me/cibsecurity/28203 · Telegram Post
• https://korelogic.com/Resources/Advisories/KL-001-2021-010.txt · Note
• https://cyberark.com/resources/blog · Note