Description
A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Broadcom | Symantec Privileged Access Management | 4.1.0 - 4.1.7, 3.4.6 | — |
Medium · 5.3
CVE-2024-38495
EUVD-2024-37371GHSA-fh4x-jgmx-j8qr
Symantec Privileged Access Manager User Enumeration vulnerability
Published Jul 15, 2024 · Updated Nov 4, 2024 · Assigned by symantec