PT-2025-3676 · Cyberark · Cyberark Privileged Access Manager

Published 2025-02-03 · Updated 2025-02-03 · CVE-2024-57967

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CyberArk Privileged Access Manager Self-Hosted versions prior to 14.4

Description The issue concerns potentially elevated privileges in LDAP mapping.

Recommendations For versions prior to 14.4, update to version 14.4 or later to resolve the issue.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2024-57967

Affected Products

Cyberark Privileged Access Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-57967 · Security Note
• https://t.me/cvedetector/17081 · Telegram Post
• https://cyberark.com/ca24-15 · Note
• https://docs.cyberark.com/pam-self-hosted/latest/en/content/release%20notes/rn-whatsnew14-4.htm#Securitybugfixes · Note
• https://twitter.com/CVEnew/status/1886479339216363958 · Twitter Post