Vulnerabilities > CVE-2021-31798 - Insufficient Entropy vulnerability in Cyberark Credential Provider
Attack vector
LOCAL Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |