CVE-2025-24506

A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.

Score

CVSS 4.0 5.3 Medium

Status

Deferred - secure@symantec.com

Published

2025-01-30

Last modified

2025-02-05

Weaknesses

CWE-203

Affected products

• Symantec Privileged Access Management (Broadcom)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362