9.4
Critical
CVE-2024-36456 This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system…
Description
This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Symantec Privileged Access Management | 3.4.6 | No fix stated |
| symantec_privileged_access_management 4.1 | 4.1.0.0 → 4.1.7 | No fix stated |
Other CVEs of Symantec Privileged Access Management
The 18 CVEs of Symantec Privileged Access Management →
CVE-2025-24507
This vulnerability allows appliance compromise at boot time
8.9
High
CVE-2025-24506
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types
5.3
Medium
CVE-2025-24505
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected…
8.8
High
CVE-2025-24504
An improper input validation the CSRF filter results in unsanitized user input written to the application logs
5.3
Medium