CVE-2018-9842

This exploit targets a memory disclosure vulnerability in CyberArk's proprietary protocol on port 1858. It sends a crafted login request to leak memory contents, writing the responses to a file for analysis.

This exploit targets a memory disclosure vulnerability in CyberArk's proprietary protocol on port 1858. It sends a crafted login request to trigger the vulnerability and dumps the server's memory response to a file.

This is a detailed advisory describing an information disclosure vulnerability in CyberArk Password Vault. The vulnerability allows an attacker to retrieve approximately 50 bytes of memory from the vault by replaying a captured logon request.