PT-2020-16071
CVE-2020-25374
·
تاريخ النشر
2020-10-28
·
تاريخ التحديث
2020-12-02
الوصف من
CVSS 3.1
2.6
منخفضةالمقاييسAV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
CyberArk Privileged Session Manager (PSM) version 10.9.0.15
Description
The issue allows attackers to discover internal pathnames by reading an error popup message after two hours of idle time.
Recommendations
For version 10.9.0.15, consider implementing a workaround to restrict access to error messages or limit the information disclosed in error popup messages until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾