CVE-2021-31798
MEDIUMCVSS 4.4/10EPSS 0.42%
Last modified
CVE-2021-31798 is a medium-severity vulnerability rated 4.4/10 on the CVSS scale. The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files.. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cyberark | Credential Provider | < 12.1 |
References
- http://packetstormsecurity.com/files/164035/CyberArk-Credential-Provider-Local-Cache-Decryption.htmlThird Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2021/Sep/3Mailing List, Third Party Advisory
- https://korelogic.com/Resources/Advisories/KL-001-2021-010.txtThird Party Advisory
- http://packetstormsecurity.com/files/164035/CyberArk-Credential-Provider-Local-Cache-Decryption.htmlThird Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2021/Sep/3Mailing List, Third Party Advisory
- https://korelogic.com/Resources/Advisories/KL-001-2021-010.txtThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-31798?
The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files.
How severe is CVE-2021-31798?
CVE-2021-31798 has a CVSS score of 4.4/10 (MEDIUM severity). The EPSS model estimates a 0.42% probability of exploitation in the next 30 days.
How do I fix CVE-2021-31798?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-31792XSS in the client account page in SuiteCRM before 7.11.19 al…5.4
- CVE-2021-31793An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 dev…7.5
- CVE-2021-31794Settings.aspx?view=About in Directum 5.8.2 allows XSS via th…6.1
- CVE-2021-31795The PowerVR GPU kernel driver in pvrsrvkm.ko through 2021-04…7
- CVE-2021-31796An inadequate encryption vulnerability discovered in CyberAr…7.5
- CVE-2021-31797The user identification mechanism used by CyberArk Credentia…5.1
- CVE-2021-31799In RDoc 3.11 through 6.x before 6.3.1, as distributed with R…7
- CVE-2021-31800Multiple path traversal vulnerabilities exist in smbserver.p…9.8
- CVE-2021-31802NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Ov…8.8
- CVE-2021-31803cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save P…6.1
- CVE-2021-31804LeoCAD before 21.03 sometimes allows a use-after-free during…5.5
- CVE-2021-31805The fix issued for CVE-2020-17530 was incomplete. So from Ap…9.8
Are you affected by CVE-2021-31798?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST