CVE-2018-9842 (MEDIUM 5.3) · Watchpost

← All vulnerabilities

CVE-2018-9842

MEDIUM 5.3CVE-2018-9842 · Published 12/04/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
password vault cyberark	`< 9.7`	`9.7`

Description

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message.

References

seclists.org/fulldisclosure/2018/Apr/19 · Exploit
securityfocus.com/archive/1/541931/100/0/threaded · Third Party Advisory
securitytracker.com/id/1040674 · Third Party Advisory
exploit-db.com/exploits/44428 · Exploit
exploit-db.com/exploits/44829 · Exploit
exploit-db.com/exploits/45926 · Exploit
redteam-pentesting.de/en/advisories/rt-sa-2017-015/-cyberark-password-vault-memory-disclosure · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free