CVE-2020-25738: cyberark endpoint_privilege_manager Uncontrolled Search Path Element
Vulnerability summary
CVE-2020-25738 is a medium (CVSS 5.5) Uncontrolled Search Path Element vulnerability in cyberark endpoint_privilege_manager. EPSS estimates a 0.44% chance of exploitation in the next 30 days, higher than 37.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 27-11-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.44%
Chance of exploitation in the next 30 days
Percentile
37%
Versus all other CVEs
30-day change
0.00 pp
From 0.44% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 found47294C1E73Ef8Cbdc098E739D086Efbc
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Cyberark1 product
- endpoint_privilege_manager11.1.0.173
1 vendor · 1 product
References
2 links- www.cyberark.com/resources/blog/introducing-cyberark-endpoint-privilege-managerX Refsource MISCVendor Advisory