Identity and Secrets Manager
CVE-2022-22700: CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the resp…
CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityUnknown
EPSS1.1%Chance of exploitation in 30 days
Public exploitNot tracked
FixSee advisory
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| CyberArk Identity 22.1 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.