| Package | Affected versions | Patched versions |
|---|---|---|
| password vault | ≥ 10.0, < 10.1< 9.9.5 | 10.19.9.5 |
The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free