Vulnerability DatabaseCVE-2020-25374

CVE-2020-25374:
CyberArk Privileged Session Manager vulnerability analysis and mitigation

Overview

CyberArk Privileged Session Manager (PSM) version 10.9.0.15 contains a path disclosure vulnerability that allows attackers to discover internal pathnames by reading an error popup message that appears after two hours of idle time during a session timeout (NVD, Full Path Blog).

Technical details

The vulnerability is classified with a CVSS v3.1 Base Score of 2.6 LOW (Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N). The issue occurs when an active session is closed due to timeout after two hours of user inactivity, causing an error message that reveals internal system paths (NVD).

Impact

The vulnerability allows attackers to gain information about internal file system paths through error messages, which could potentially be used to assist in further attacks by providing insight into the system's directory structure (NVD).

Exploitability

The vulnerability requires network access, high attack complexity, low privileges, and user interaction to exploit. An attacker would need to wait for a session timeout to occur (after 2 hours of inactivity) to view the exposed path information (NVD).

Mitigation and workarounds

The vulnerability affects CyberArk PSM version 10.9.0.15. Users should upgrade to a patched version of the software as recommended by CyberArk (CyberArk Docs).