CVE-2018-14894
HIGHCyberArk Endpoint Privilege Manager <10.2.1.603 - Privilege Escalation
Title source: llmDescription
CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications.
Exploits (1)
References (4)
Core 4
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.youtube.com/watch?v=B0VpK0poTco
Exploit, Third Party Advisory x_refsource_misc
https://mustafakemalcan.com/cyberark-epm-file-block-bypass-cve-2018-14894/
Exploit, Third Party Advisory, VDB Entry exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/46688/
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/152489/CyberArk-EPM-10.2.1.603-Security-Restrictions-Bypass.html
Scores
CVSS v3
7.8
EPSS
0.0017
EPSS Percentile
37.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-269
Status
published
Products (1)
cyberark/endpoint_privilege_manager
< 10.2.1.603
Published
Apr 09, 2019
Tracked Since
Feb 18, 2026