Vulnerabilities > CVE-2024-54840 - Unspecified vulnerability in Cyberark Privileged Access Manager

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

cyberark

NVD

Published: 2025-02-03

Updated: 2025-03-14

Summary

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.

Vulnerable Configurations

Part	Description	Count
Application	Cyberark Cyberark Privileged Access Manager 10.2 Cyberark Privileged Access Manager 10.3 Cyberark Privileged Access Manager 10.4 Cyberark Privileged Access Manager 10.5 Cyberark Privileged Access Manager 10.6 Cyberark Privileged Access Manager 10.7 Cyberark Privileged Access Manager 10.8 Cyberark Privileged Access Manager 10.9 Cyberark Privileged Access Manager 10.10 Cyberark Privileged Access Manager 11.1 Cyberark Privileged Access Manager 11.2 Cyberark Privileged Access Manager 11.3 Cyberark Privileged Access Manager 11.4 Cyberark Privileged Access Manager 11.4.1 Cyberark Privileged Access Manager 11.4.2 Cyberark Privileged Access Manager 11.6 Cyberark Privileged Access Manager 11.6.2 Cyberark Privileged Access Manager 11.7 Cyberark Privileged Access Manager 11.7.1 Cyberark Privileged Access Manager 11.7.2 Cyberark Privileged Access Manager 11.7.3 Cyberark Privileged Access Manager 12.0 Cyberark Privileged Access Manager 12.0.1 Cyberark Privileged Access Manager 12.0.2 Cyberark Privileged Access Manager 12.0.3 Cyberark Privileged Access Manager 12.0.4 Cyberark Privileged Access Manager 12.1 Cyberark Privileged Access Manager 12.1.1 Cyberark Privileged Access Manager 12.1.2 Cyberark Privileged Access Manager 12.1.3 Cyberark Privileged Access Manager 12.1.5 Cyberark Privileged Access Manager 12.1.6 Cyberark Privileged Access Manager 12.1.8 Cyberark Privileged Access Manager 12.3 Cyberark Privileged Access Manager 12.4 Cyberark Privileged Access Manager 12.4.1 Cyberark Privileged Access Manager 12.6 Cyberark Privileged Access Manager 13.0 Cyberark Privileged Access Manager 13.0.1 Cyberark Privileged Access Manager 13.0.2 Cyberark Privileged Access Manager 13.0.3 Cyberark Privileged Access Manager 13.0.4 Cyberark Privileged Access Manager 13.2 Cyberark Privileged Access Manager 13.2.1 Cyberark Privileged Access Manager 13.2.2 Cyberark Privileged Access Manager 13.2.3 Cyberark Privileged Access Manager 13.2.4 Cyberark Privileged Access Manager 13.2.5 Cyberark Privileged Access Manager 14.0 Cyberark Privileged Access Manager 14.0.1 Cyberark Privileged Access Manager 14.0.2 Cyberark Privileged Access Manager 14.0.3 Cyberark Privileged Access Manager 14.0.4 Cyberark Privileged Access Manager 14.2.1 Cyberark Privileged Access Manager 14.2.2	55

Summary

Vulnerable Configurations

References