PT-2023-10448 · Cyberark · Cyberark Viewfinity

Eric Guillen

+1

·

CVE-2017-11197

·

Published

2023-05-03

·

Updated

2025-01-30

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions CyberArk Viewfinity versions 5.5.10.95 through 6.1.1.219 CyberArk Viewfinity version 6.x before 6.1.1.220
Description A low privilege user can escalate to an administrative user via a bug within the "add printer" option.
Recommendations For CyberArk Viewfinity versions 5.5.10.95 through 6.1.1.219, update to version 6.1.1.220 or later. For CyberArk Viewfinity version 6.x before 6.1.1.220, update to version 6.1.1.220 or later.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2017-11197

Affected Products

Cyberark Viewfinity