NetSight
medium4.2

CVE-2024-54840

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute…

Impact

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.

Affected products

VendorProductAffected versions
CyberarkPrivileged Access Manager
before 14.4

Weakness classification

References