Description
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Broadcom | Symantec Privileged Access Management | 3.4.6, 4.1.0 – ≤ 4.1.8, 4.2.0 | — |