CVE-2024-54840

4.2MEDIUM

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.

发布于: 2/3/2025更新于: 3/14/2025

描述

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.

AI分析AI驱动

受影响产品

cyberarkprivileged_access_manager

参考资料