CVE-2022-22700 in Identityinformación

Resumen

por MITRE • 2022-03-03

CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

2022-01-05

Divulgación

2022-03-03

Moderación

aceptado

Artículo

VDB-194180

CPE

listo

EPSS

0.01115

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-22700
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-22700
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-22700/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!