CVE-2024-42337
CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Severity
Medium 4.3
CVSS 3.1
Exploited
Not listed
EPSS
0.003
23.7th percentile
Discovered by
Unknown
Vendor-published field
Published
Aug 25, 2024
Assigned by incd
Description
CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Weakness: CWE-200
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | CyberArk Identity | Identity / IAM / MFA | affected-vendor |
Vendor-reported products (1)
- CyberArk · CyberArk Identity Management
Credit
Dudu Moyal, Moriel Harush - Peer Security LTD
Vendor remediation
Upgrade to latest version