9 results · Clear filters · Feed
-
Medium 5.3
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.
-
Medium 5.3
An improper input validation the CSRF filter results in unsanitized user input written to the application logs.
-
Medium 5.3
An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed…
-
Medium 5.3
An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP r…
-
Medium 5.1
Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability
The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships.
-
Medium 5.3
Symantec Privileged Access Manager User Enumeration vulnerability
A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database.
-
Medium 6.8
Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the…
-
Medium 5.1
Symantec Privileged Access Manager Privilege Escalation vulnerability
The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions.
-
Medium 5.3
Symantec Privileged Access Manager Authentication Bypass vulnerability
The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint.