CVE-2024-36458

The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions.

Score

CVSS 4.0 5.1 Medium

Status

Deferred - secure@symantec.com

Published

2024-07-15

Last modified

2024-11-21

Weaknesses

CWE-918

Affected products

• Symantec Privileged Access Management (Broadcom)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678