Hi everybody, today I just want to talk about CyberArk EPM Privilege Escalation vulnerability (CVE-2018-13052). Actually CyberArk made awesome product – at least in theoretically -. Companies can arrange privileges from one single console. It has a lot of options to arrange privileges. For example, you can set a specific application to elevate but at the same…
CyberArk EPM file block bypass – CVE-2018-14894
Hi folks! I found an interesting vulnerability on CyberArk Endpoint Privilege Manager. CyberArk EPM file block bypass (CVE-2018-14894) is very easy -even you have slave privileges-.CyberArk EPM aims to manage privileges from one hand and prevent any harm with admin privileges. How does CyberArk EPM work? If user needs admin privileges, CyberArk gives the admin token to…