CVE-2018-14894 - CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications

Back Back to CVE browser

HIGH

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications

Published Apr 9, 2019

7.8

HIGH

CVSS 3.0

EPSS 1.93%

Description

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (4)

http://packetstormsecurity.com/files/152489/CyberArk-EPM-10.2.1.603-Security-Restrictions-Bypass.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://mustafakemalcan.com/cyberark-epm-file-block-bypass-cve-2018-14894/
x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/46688/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
https://www.youtube.com/watch?v=B0VpK0poTco
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/152489/CyberArk-EPM-10.2.1.603-Security-Restrictions-Bypass.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://mustafakemalcan.com/cyberark-epm-file-block-bypass-cve-2018-14894/		x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/46688/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
https://www.youtube.com/watch?v=B0VpK0poTco		x_refsource_MISCExploitThird Party Advisory