CVE-2024-54840

4.2MEDIUM

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.

Published: 2/3/2025Updated: 3/14/2025
View on NVDView on MITRE

Description

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.

AI AnalysisPowered by AI

Affected Products

cyberarkprivileged_access_manager

References