CyberArk Privileged Access Manager

• CVE-2024-57967 Medium 4.2 PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping. 0.2%
• CVE-2024-54840 Medium 4.2 PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection. 0.2%