PT-2023-10448 · Cyberark · Cyberark Viewfinity

Eric Guillen + 1 · Published 2023-05-03 · Updated 2025-01-30 · CVE-2017-11197

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CyberArk Viewfinity versions 5.5.10.95 through 6.1.1.219 CyberArk Viewfinity version 6.x before 6.1.1.220

Description A low privilege user can escalate to an administrative user via a bug within the "add printer" option.

Recommendations For CyberArk Viewfinity versions 5.5.10.95 through 6.1.1.219, update to version 6.1.1.220 or later. For CyberArk Viewfinity version 6.x before 6.1.1.220, update to version 6.1.1.220 or later.

Exploit

Fix

Related Identifiers

CVE-2017-11197

Affected Products

Cyberark Viewfinity

References · 8

• 🔥 https://exploit-db.com/exploits/42319 · Exploit
• https://osv.dev/vulnerability/CVE-2017-11197 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11197 · Security Note
• https://t.me/cvenotify/50117 · Telegram Post
• https://t.me/cvenotify/109243 · Telegram Post
• http://lp.cyberark.com/rs/316-CZP-275/images/ds-Viewfinity-102315-web.pdf · Note
• https://t.me/cibsecurity/63254 · Telegram Post
• https://t.me/cvenotify/49752 · Telegram Post