CVE-2021-31796

An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure

published September 2, 2021

CVSS
—
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically have enough information that the number of possible keys (for a credential file) is only one, and the number is usually not higher than 2^36.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01763 · 77.9th percentile
Published
2021-09-02T00:24Z
EPSS history
Timeline
  • 02 SEP 00:24Z
    An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure
    cvelistv5