Description
The vulnerability allows an unauthenticated attacker to read arbitrary information from the database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Broadcom | Symantec Privileged Access Management | 4.1.0 - 4.1.7, 3.4.6 | — |
High · 8.4
CVE-2024-38491
EUVD-2024-37367GHSA-ggjm-xrj4-6cfc
Symantec Privileged Access Manager SQL Injection vulnerability
Published Jul 15, 2024 · Updated Nov 4, 2024 · Assigned by symantec