CVEvulnerability
CVE-2021-44049
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-01-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-668
Description
CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory.
Affected configurations
• cyberark endpoint privilege manager (>= 11.5.3.328 < 11.5.4.355)
• cyberark endpoint privilege manager (>= 11.5.3.328 < 11.5.4.500)
Related
Weakness · CWE (1)
- CWE-668 Exposure of Resource to Wrong Sphere weakness
References
- https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM-onprem/Latest/en/Content/Release%20Notes/RN-WhatsNew.htm Vendor Advisory
- https://hencohen10.medium.com/cyberark-endpoint-manager-local-privilege-escalation-cve-2021-44049-67cd5e62c3d2 Exploit, Third Party Advisory
- https://www.cyberark.com/ca21-34/ Permissions Required, Vendor Advisory
- https://www.cyberark.com/product-security/ Vendor Advisory
- https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM-onprem/Latest/en/Content/Release%20Notes/RN-WhatsNew.htm Vendor Advisory
- https://hencohen10.medium.com/cyberark-endpoint-manager-local-privilege-escalation-cve-2021-44049-67cd5e62c3d2 Exploit, Third Party Advisory
- https://www.cyberark.com/ca21-34/ Permissions Required, Vendor Advisory
- https://www.cyberark.com/product-security/ Vendor Advisory