CVE-2018-13052
UnknownEPSS 1.21%
Last modified
CVE-2018-13052 is a vulnerability of currently unknown severity. In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin.. EPSS estimates a 1.21% chance of exploitation in the next 30 days.
Description
In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cyberark | Endpoint Privilege Manager | All versions |
References
- https://www.youtube.com/watch?v=xYRbXBPubawBroken Link, Third Party Advisory
- https://www.youtube.com/watch?v=xYRbXBPubawBroken Link, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-13052?
In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin.
How severe is CVE-2018-13052?
Severity scoring for CVE-2018-13052 is pending analysis. The EPSS model estimates a 1.21% probability of exploitation in the next 30 days.
How do I fix CVE-2018-13052?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-13042The 1Password application 6.8 for Android is affected by a D…
- CVE-2018-13043scripts/grep-excuses.pl in Debian devscripts through 2.18.3 …
- CVE-2018-13045SQL injection vulnerability in the "Bazar" page in Yeswiki C…
- CVE-2018-13049The constructSQL function in inc/search.class.php in GLPI 9.…
- CVE-2018-1305Security constraints defined by annotations of Servlets in A…
- CVE-2018-13050A SQL Injection vulnerability exists in Zoho ManageEngine Ap…
- CVE-2018-13053The alarm_timer_nsleep function in kernel/time/alarmtimer.c …
- CVE-2018-13054An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The…
- CVE-2018-13055A cross-site scripting (XSS) vulnerability in the View Filte…
- CVE-2018-13056An issue was discovered on zzcms 8.3. There is a vulnerabili…
- CVE-2018-1306The PortletV3AnnotatedDemo Multipart Portlet war file code p…
- CVE-2018-13060Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue.6.5
Are you affected by CVE-2018-13052?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST