Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CyberArk Password Vault Web Access 安全漏洞
Vulnerability Description
CyberArk Password Vault Web Access是以色列CyberArk Software公司的一款企业密码管理应用程序。该程序能够管理敏感密码，控制各种客户端/服务器和大型机操作系统、交换机、数据库中的特权帐户密码。 CyberArk Password Vault Web Access 9.9.5之前版本、9.10之前版本和10.1版本中的REST API存在远程代码执行漏洞。远程攻击者可借助Authorization HTTP包头中序列化的.NET对象利用该漏洞在Web服务器上执行
CVSS Information
N/A
Vulnerability Type
N/A