CVE-2024-38495

A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database.

Score

CVSS 4.0 5.3 Medium

Status

Deferred - secure@symantec.com

Published

2024-07-15

Last modified

2024-11-04

Affected products

• Symantec Privileged Access Management (Broadcom)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678