CyberArk Privileged Access Manager Self-Hosted LDAP Mapping Privilege Escalation Vulnerability

A vulnerability in the Password Vault Web Access (PVWA) component of CyberArk Privileged Access Manager Self-Hosted, prior to version 14.4, allows for potentially elevated privileges through improper handling of LDAP mapping. This issue could be exploited by manipulating group mapping parameters, leading to unauthorized access or privileges.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges within the application, allowing users to gain access to resources or functionalities that should be restricted.

Remediation

Users are advised to upgrade to CyberArk Privileged Access Manager Self-Hosted version 14.4 or later, where this vulnerability has been addressed.