Privilege Escalation Vulnerability in CyberArk Viewfinity Products
CVE-2017-11197

7.8HIGH

Key Information:

Vendor

Cyberark

Status
Viewfinity
Vendor
CVE Published:
3 May 2023

What is CVE-2017-11197?

A vulnerability exists in CyberArk Viewfinity prior to version 6.1.1.220 that allows a low privilege user to exploit a flaw in the 'add printer' functionality. By manipulating this feature, an unauthorized user can escalate their privileges to gain administrative access, compromising system security. Organizations using affected versions should apply updates and evaluate their security posture to mitigate risk.

References

http://lp.cyberark.com/rs/316-CZP-275/images/ds-Viewfinit...
https://www.exploit-db.com/exploits/42319

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.