Cyberark Credential Provider
3 CVEs affecting Cyberark Credential Provider. Latest disclosed: 2021-09-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-31796 | High | 7.5 | 2021-09-02 | An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically… |
CVE-2021-31797 | Medium | 5.1 | 2021-09-02 | The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to password disclos… |
CVE-2021-31798 | Medium | 4.4 | 2021-09-02 | The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious… |