CVE-2024-36455

An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.

Score

CVSS 4.0 9.4 Critical

Status

Deferred - secure@symantec.com

Published

2024-07-15

Last modified

2024-08-02

Weaknesses

CWE-665

Affected products

• Symantec Privileged Access Management (Broadcom)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678