8.4
Élevée
CVE-2024-38491 The vulnerability allows an unauthenticated attacker to read arbitrary information from the database
Description
The vulnerability allows an unauthenticated attacker to read arbitrary information from the database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Symantec Privileged Access Management | 3.4.6 | Pas de correctif indiqué |
Références
- support.broadcom.com support.broadcom.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Symantec Privileged Access Management
Les 18 CVE de Symantec Privileged Access Management →
CVE-2025-24507
This vulnerability allows appliance compromise at boot time
8.9
Élevée
CVE-2025-24506
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types
5.3
Moyenne
CVE-2025-24505
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected…
8.8
Élevée
CVE-2025-24504
An improper input validation the CSRF filter results in unsanitized user input written to the application logs
5.3
Moyenne