CVE-2025-24503

A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server...

CVE-2024-38496

The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships...

CVE-2024-36458

CVE-2024-36458 affects Broadcom Symantec Privileged Access Management (PAM). The available documents confirm that a malicious, low-privileged PAM user can perform server upgrade related actions, indicating a privilege-escalation path within PAM components. The incident description is consistent a...

CVE-2024-36458 Symantec Privileged Access Manager Privilege Escalation vulnerability

The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions...

CVE-2022-25625

A malicious unauthorized PAM user can access the administration configuration data and change the values...

Design/Logic Flaw

A malicious unauthorized PAM user can access the administration configuration data and change the values...

CVE-2022-25625

A malicious unauthorized PAM user can access the administration configuration data and change the values...

Fedora 17 : gsi-openssh-5.9p1-11.fc17 (2013-5051)

Security fix for vulnerability - http://grid.ncsa.illinois.edu/ssh/pamuserchange-2013-01. adv - https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2013-5168 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...