cve.bz

CVE-2021-31798

4.4 mediumEPSS 0.4%

Medium (4.4) in cyberark credential provider. EPSS 0.4% chance of exploitation in the next 30 days.

The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious user can obtain the plaintext of cache files.

Severity

CVSS 3.1

4.4 medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE
CWE-331
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON