PT-2025-3075 · Cyberark · Cyberark Privileged Access Manager

Abel Iglesias Iglesias · Published 2025-02-03 · Updated 2025-02-03 · CVE-2024-54840

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CyberArk Privileged Access Manager Self-Hosted versions prior to 14.4

Description The issue arises from inadequate handling of environment problems that can lead to Host header injection. This can potentially allow attackers to manipulate the Host header, which could lead to security issues. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For versions prior to 14.4, update to version 14.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the PVWA (Password Vault Web Access) to minimize the risk of exploitation. Avoid using the Host header in sensitive operations until the issue is resolved.

Fix

Weakness Enumeration

CWE-348

Related Identifiers

CVE-2024-54840

Affected Products

Cyberark Privileged Access Manager

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-54840 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54840 · Vendor Advisory
• https://t.me/cvedetector/17087 · Telegram Post
• https://twitter.com/CVEnew/status/1886467096240062587 · Twitter Post
• https://gist.github.com/Hurdano/8244855ef8ec364fd98a2693de6e30c5 · Note
• https://t.me/cvedetector/17084 · Telegram Post
• https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-4.htm#Securitybugfixes · Note