CVE-2020-25374

Vulnerability

In CyberArk Privileged Session Manager (PSM) version 10.9.0.15, an error popup message that appears after two hours of idle time reveals internal pathnames. This is a result of insufficient error handling that exposes sensitive file system information.

Exploitation

An attacker who is able to access a PSM session and leave it idle for two hours will trigger the error popup. No authentication is required beyond the initial session access. The attacker can then read the internal pathnames displayed in the popup message.

Impact

Successful exploitation leads to information disclosure of internal pathnames, exposing the directory structure of the server. This information can be used to plan further attacks, such as path traversal or privilege escalation.

Mitigation

As of the publication date (2020-10-28), no official fix or workaround has been disclosed in the provided references. Users should consult CyberArk support for potential updates or apply vendor recommendations if available.