Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-25626 EUVD-2022-30286GHSA-4446-w42r-xvj9

An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to …

Published Dec 16, 2022 · Updated Apr 18, 2025 · Assigned by symantec

Description

An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.

Affected products

VendorProductAffectedFixed
— Symantec Identity Governance and Administration 14.3, 14.4 —

References