Skip to content
OpenAdvisories
Critical · 9.4 CVE-2024-38492 EUVD-2024-37368GHSA-x26h-97qp-jh49

Symantec Privileged Access Manager Remote Command Execution vulnerability

Published Jul 15, 2024 · Updated Aug 2, 2024 · Assigned by symantec

Description

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.

Affected products

VendorProductAffectedFixed
Broadcom Symantec Privileged Access Management 4.1.0 - 4.1.7, 3.4.6 —

Advisories 1

References