CVE-2017-11197

HIGH 7.8CVE-2017-11197 · Published 03/05/2023 · updated 17/06/2026

In short

CVE-2017-11197 is a HIGH (CVSS 7.8) vulnerability affecting viewfinity (cyberark).
Chance of exploitation in the next 30 days (EPSS): 0.98%, higher than 62.4% of all vulnerabilities.
Fix: update to 6.1.1.220 or later.

Package	Affected versions	Patched versions
viewfinity cyberark	`= 5.5.10.95≥ 6.0, < 6.1.1.220`	`6.1.1.220`

Description

In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within the "add printer" option.

References

lp.cyberark.com/rs/316-CZP-275/images/ds-Viewfinity-102315-web.pdf · Product
exploit-db.com/exploits/42319 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free