Skip to content
OpenAdvisories
Critical · 9.4 CVE-2024-36456 EUVD-2024-36100GHSA-jx6c-5cpp-f93r

Symantec Privileged Access Manager Remote Command Execution vulnerability

Published Jul 15, 2024 · Updated Aug 2, 2024 · Assigned by symantec

Description

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.

Affected products

VendorProductAffectedFixed
Broadcom Symantec Privileged Access Management 4.1.0 - 4.1.7, 3.4.6 —

Advisories 1

References