Detections
Analytics

CyberArk Password Vault Web Access .NET Object Deserialization

critical Nessus Plugin ID 108952

Language:

Synopsis

An Identity Management application running on the remote host is affected by a remote code execution vulnerability.

Description

The version of CyberArk Password Vault Web Access running on the remote host is prior to 9.9.5, 9.10.x prior to 9.10.1, or is version 10.1. It is, therefore, vulnerable to a remote code execution vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to CyberArk Password Vault 9.9.5, 9.10.1, 10.2 or Later.

See Also

http://www.nessus.org/u?e1d84c64

Plugin Details

Severity: Critical

ID: 108952

File Name: cyberark_password_vault_9_9_5.nasl

Version: 1.10

Type: remote

Family: CGI abuses

Published: 4/10/2018

Updated: 10/7/2019

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2018-9843

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:cyberark:password_vault

Required KB Items: Settings/ParanoidReport

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/28/2018

Vulnerability Publication Date: 4/9/2018

Reference Information

CVE: CVE-2018-9843

BID: 105180

IAVB: 2018-B-0121