CVE-2024-54840

4.2MEDIUM

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.

Veröffentlicht: 2/3/2025Aktualisiert: 3/14/2025
Auf NVD ansehenAuf MITRE ansehen

Beschreibung

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.

KI-AnalyseKI-gestützt

Betroffene Produkte

cyberarkprivileged_access_manager

Referenzen