Description
An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Broadcom | Symantec Privileged Access Management | 4.1.0 - 4.1.7, 3.4.6 | — |
Advisories 1
- NCSC-2024-0316 Kwetsbaarheid verholpen in Broadcom Symantec Privileged Access Management NCSC-NL (Netherlands) · Jul 22, 2024