9.4
Critique
CVE-2024-36455 An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected…
Description
An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Symantec Privileged Access Management | 3.4.6 | Pas de correctif indiqué |
| symantec_privileged_access_management | 3.4.6.0 | Pas de correctif indiqué |
Autres CVE de Symantec Privileged Access Management
Les 18 CVE de Symantec Privileged Access Management →
CVE-2025-24507
This vulnerability allows appliance compromise at boot time
8.9
Élevée
CVE-2025-24506
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types
5.3
Moyenne
CVE-2025-24505
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected…
8.8
Élevée
CVE-2025-24504
An improper input validation the CSRF filter results in unsanitized user input written to the application logs
5.3
Moyenne