CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCyberark Password Vault
APPCyberark< 9.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References
Related vulnerabilities
CVE-2018-9843CRITICAL9.8PL ✓same product
RCE w CyberArk Password Vault Web Access — niebezpieczna deserializacja .NET
CVE-2025-49827CRITICAL9.1PL ✓same vendor
CyberArk Conjur — bypass uwierzytelniania IAM przez błędne wyrażenie regularne
CVE-2025-49831CRITICAL9.1PL ✓same vendor
CyberArk Conjur – pominięcie uwierzytelnienia przez przekierowanie ruchu (Auth Bypass)
CVE-2019-7442CRITICAL9.8PL ✓same vendor
XXE w CyberArk Enterprise Password Vault — odczyt plików i bypass uwierzytelnienia
CVE-2018-13052CRITICAL9.8PL ✓same vendor
Privilege Escalation w CyberArk Endpoint Privilege Manager