CyberArk Security Bulletin CA23-14, CA23-15, CA23-16
El equipo de respuesta a incidentes de seguridad de productos de CyberArk emitió avisos sobre las siguientes vulnerabilidades.
Vulnerabilidad
CyberArk Security Bulletin CA23-14
• Posible exposición de credenciales a un usuario no autorizado.
Nivel de Severidad: High
Score: N/A
Impacto: Exposición de información sensible a un usuario no autorizado.
CyberArk Security Bulletin CA23-15
• Neutralización incorrecta de elementos especiales utilizados en una consulta LDAP.
Nivel de Severidad: Critica
Score: 9.9
Impacto: Neutralización incorrecta de elementos especiales utilizados en una consulta LDAP.
CyberArk Security Bulletin CA23-16
• Posible exposición de credenciales a un usuario no autorizado.
Nivel de Severidad: High (Metodología de clasificación de riesgos de OWASP).
Score: High (Metodología de clasificación de riesgos de OWASP).
Impacto: Exposición de información sensible a un usuario no autorizado.
Versiones Afectadas
CyberArk Security Bulletin CA23-14
| PRODUCTO | VERSIONES | INFORMACION ADICIONAL |
| Password Vault Web Access (PVWA), Self-hosted | Todas las versiones anteriores a la 13.2 | N/A |
CyberArk Security Bulletin CA23-15
| PRODUCTO | VERSIONES | INFORMACION ADICIONAL |
| Password Vault Web Access (PVWA), Self-hosted | Todas las versiones anteriores a la 13.2 | N/A |
CyberArk Security Bulletin CA23-16
| PRODUCTO | VERSIONES | INFORMACION ADICIONAL |
| Privileged Session Manager (PSM), Self-hosted | Todas las versiones anteriores a la 13.2 | La versión 13.2 de PSM solo se ve afectada si se utilizan componentes de conexión de 64 bits. |
Recomendaciones
- Actualizar a las versiones estables.
CyberArk Security Bulletin CA23-14
| VERSION INSTALADA | PARCHE | DESCARGA | DOCUMENTACION |
| PVWA 13.2 | No requiere acciones | ||
| PVWA 13.0 (STS) y sus parches anteriores a 13.0.3, o versiones anteriores. | 13.0.3 | https://www.cyberark.com/ca23-14-PVWA-13.0.3 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PAS%20INST/PVWA-upgrade-overview.htm?tocpath=Installation%7CUpgrade%7CUpgrade%20PVWA%7C_____1 |
| PVWA 12.6 (LTS) y parches anteriores a 12.6.7 o versiones anteriores. | 12.6.7 | https://www.cyberark.com/ca23-14-PVWA-12.6.7 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.6/en/Content/PAS%20INST/PVWA-upgrade-overview.htm?tocpath=Installation%7CUpgrade%7CUpgrade%20PVWA%7C_____1 |
| PVWA 12.2 (LTS) y parches anteriores a 12.2.12 o versiones anteriores. | 12.2.12 | https://www.cyberark.com/ca23-14-PVWA-12.2.12 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.2/en/Content/PAS%20INST/PVWA-upgrade-overview.htm?tocpath=Installation%7CUpgrade%7CUpgrade%20PVWA%7C_____1 |
| PVWA 11.5 (LTS) y parches anteriores a 11.5.17 o versiones anteriores. | 11.5.17 | https://www.cyberark.com/ca23-14-PVWA-11.5.17 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.5/en/Content/PAS%20INST/Upgrading-the-Password-Vault-Web-Access.htm |
CyberArk Security Bulletin CA23-15
| VERSION INSTALADA | PARCHE | DESCARGA | DOCUMENTACION |
| PVWA 13.2 (STS) y sus parches anteriores a 13.2.2, o versiones anteriores | 13.2.2 | https://www.cyberark.com/ca23-15-PVWA-13.2.2 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.2/en/Content/PAS%20INST/PVWA-upgrade-overview.htm?tocpath=Installation%7CUpgrade%7CUpgrade%20PVWA%7C_____1 |
| PVWA 13.0 (STS) y sus parches anteriores a 13.0.3, o versiones anteriores. | 13.0.3 | https://www.cyberark.com/ca23-15-PVWA-13.0.3 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PAS%20INST/PVWA-upgrade-overview.htm?tocpath=Installation%7CUpgrade%7CUpgrade%20PVWA%7C_____1 |
| PVWA 12.6 (LTS) y parches anteriores a 12.6.7 o versiones anteriores. | 12.6.7 | https://www.cyberark.com/ca23-15-PVWA-12.6.7 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.6/en/Content/PAS%20INST/PVWA-upgrade-overview.htm?tocpath=Installation%7CUpgrade%7CUpgrade%20PVWA%7C_____1 |
| PVWA 12.2 (LTS) y parches anteriores a 12.2.12 o versiones anteriores. | 12.2.12 | https://www.cyberark.com/ca23-15-PVWA-12.2.12 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.2/en/Content/PAS%20INST/PVWA-upgrade-overview.htm?tocpath=Installation%7CUpgrade%7CUpgrade%20PVWA%7C_____1 |
| PVWA 11.5 (LTS) y parches anteriores a 11.5.17 o versiones anteriores. | 11.5.17 | https://www.cyberark.com/ca23-15-PVWA-11.5.17 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.5/en/Content/PAS%20INST/Upgrading-the-Password-Vault-Web-Access.htm |
CyberArk Security Bulletin CA23-16
| VERSION INSTALADA | PARCHE | DESCARGA | DOCUMENTACION |
| 13.2 | 13.2.2 | https://www.cyberark.com/ca23-16-PSM-13.2.2 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Upgrading-the-PSM.htm?tocpath=Installation%7CUpgrade%7CPrivileged%20Session%20Manager%7C_____1 |
| 12.6 | 12.6.7 | https://www.cyberark.com/ca23-16-PSM-12.6.7 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.6/en/Content/PAS%20INST/Upgrading-the-PSM.htm |
| 12.2 | 12.2.12 | https://www.cyberark.com/ca23-16-PSM-12.2.12 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.2/en/Content/PAS%20INST/Upgrading-the-PSM.htm |
| 11.5 | 11.5.17 | https://www.cyberark.com/ca23-16-PSM-11.5.17 | https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.5/en/Content/PAS%20INST/Upgrading-the-PSM.htm |
Referencias
CyberArk Security Bulletin CA23-14: https://cyberark-customers.force.com/s/article/CyberArk-Security-Bulletin-CA23-14
CyberArk Security Bulletin CA23-15: https://cyberark-customers.force.com/s/article/CyberArk-Security-Bulletin-CA23-15
CyberArk Security Bulletin CA23-16: https://cyberark-customers.force.com/s/article/CyberArk-Security-Bulletin-CA23-16
