CVE-2021-44049
HIGHCyberArk Endpoint Privilege Manager 11.5.3.328-11.5.4.355 - Local Privilege Escalation via Trojan Horse Procmon64.exe
Title source: llmDescription
CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_misc
https://www.cyberark.com/product-security/
Vendor Advisory x_refsource_misc
https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM-onprem/Latest/en/Content/Release%20Notes/RN-WhatsNew.htm
Permissions Required, Vendor Advisory x_refsource_confirm
https://www.cyberark.com/ca21-34/
Exploit, Third Party Advisory x_refsource_misc
https://hencohen10.medium.com/cyberark-endpoint-manager-local-privilege-escalation-cve-2021-44049-67cd5e62c3d2
Scores
CVSS v3
7.8
EPSS
0.0040
EPSS Percentile
32.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-668
Status
published
Products (2)
cyberark/endpoint_privilege_manager
11.5.3.328 - 11.5.4.355
cyberark/endpoint_privilege_manager
11.5.3.328 - 11.5.4.500
Published
Jan 15, 2022
Tracked Since
Feb 18, 2026