Description
The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files.
Unscored
CVE-2021-31798
EUVD-2021-18679GHSA-gghc-6wpq-rr46
The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditio…
Published Sep 2, 2021 · Updated Aug 3, 2024 · Assigned by mitre