CveMateVulnerability intelligence

Cyberark Credential Provider vulnerabilities

3 vulnerabilities

Known vulnerabilities in Cyberark Credential Provider, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2021-31797cyberarkcredential_provider5y ago01-09-2021 23:58

The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to password disclosure.CVE-2021-31798cyberarkcredential_provider5y ago02-09-2021 00:09

The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files.CVE-2021-31796cyberarkcredential_provider5y ago02-09-2021 00:24

An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically have enough information that the number of possible keys (for a credential file) is only one, and the number is usually not higher than 2^36.