← back
CVE-2020-25738

CVE-2020-25738

EPSS 0.4%
CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that normally has credential access, such as a Chrome process that reads credentials from a SQLite database.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://gist.github.com/inc0d3/47294c1e73ef8cbdc098e739d086efbchttps://www.cyberark.com/resources/blog/introducing-cyberark-endpoint-privilege-manager