[CVE-2026-45171] Incomplete input validation and improperly configured folder permissions within Idira Privileged Ses…

Descripción técnica

Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute arbitrary code. CyberArk Security Bulletin: CA26-17 and CA26-18

Puntuación CVSS

Score: 8.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Idira privileged session manager — Paloaltonetworks

Debilidades (CWE)

CWE-22

Fuente oficial

Publicado en NIST NVD.