CVE-2024-57967: Cyberark Privileged Access Manager

Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days.

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping.

Affected products

• Cyberark Privileged Access Manager: before 14.4 (fixed in 14.4)

Published 2025-02-03. Last modified 2026-06-17.