CVE-2024-57967

Summary

CVE-2024-57967 is a vulnerability affecting the Password Vault Web Access (PVWA) component in CyberArk Privileged Access Manager Self-Hosted versions prior to 14.4. This issue grants potentially elevated privileges during LDAP (Lightweight Directory Access Protocol) mapping, which could be exploited by an attacker to gain unauthorized access to sensitive information or perform unintended actions within the system. By manipulating LDAP mappings, an adversary may escalate their privileges beyond intended access levels, posing a significant risk to the security of the targeted environment. Organizations using CyberArk Privileged Access Manager Self-Hosted versions below 14.4 are strongly advised to upgrade to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.