CVE-2017-11197: In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administ...

Security readout for executives and security teams

This flaw lets a low-privilege local user on affected CyberArk Viewfinity systems gain administrative rights through the product's add-printer functionality. That can turn an ordinary endpoint account into full local control, creating risk for credential theft, tampering, and wider movement. Exposure is limited to systems running the affected Viewfinity versions, primarily where untrusted or standard users can log in locally. The source bundle does not identify affected CPEs or deployment prevalence. Treat this as a high-priority endpoint privilege-escalation issue. It requires local access, but successful abuse can give an attacker administrative control on affected machines and support broader compromise. Mitigation focus: Inventory endpoints and servers for CyberArk Viewfinity installations.; Upgrade affected 6.x deployments to 6.1.1.220 or later, following CyberArk guidance.; Check vendor guidance for supported remediation of Viewfinity 5.5.10.95..

Prepared

May 23, 2026, 17:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.