| Package | Affected versions | Patched versions |
|---|---|---|
| credential provider | < 12.1 | 12.1 |
An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically have enough information that the number of possible keys (for a credential file) is only one, and the number is usually not higher than 2^36.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free