5.3
Moyenne
CVE-2025-24504 An improper input validation the CSRF filter results in unsanitized user input written to the application logs
Description
An improper input validation the CSRF filter results in unsanitized user input written to the application logs.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Symantec Privileged Access Management | 4.2.0 | Pas de correctif indiqué |
| Symantec Privileged Access Management 4.1 | 4.1.0 → 4.1.8 | Pas de correctif indiqué |
| Symantec Privileged Access Management | 3.4.6 | Pas de correctif indiqué |
Références
- support.broadcom.com support.broadcom.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Symantec Privileged Access Management
Les 18 CVE de Symantec Privileged Access Management →
CVE-2025-24507
This vulnerability allows appliance compromise at boot time
8.9
Élevée
CVE-2025-24506
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types
5.3
Moyenne
CVE-2025-24505
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected…
8.8
Élevée
CVE-2025-24503
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM…
9.3
Critique