3580 matches found
CVE-2025-24505
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file...
CVE-2025-24505
Technical details about CVE-2025-24505, including affected products, versions, root cause, and fixes, are not publicly available in the provided connected documents. Monitor for updates.
CVE-2025-24503
Symantec Privileged Access Management (PAM) is affected by CVE-2025-24503. The PT-2025-5375 entry provides concrete details: versions prior to 4.2.1 are vulnerable to a cross-site request forgery-style issue where a malicious actor can fix ( hijack ) a PAM session by tricking a user into clicking...
CVE-2025-24503
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server...
CVE-2025-24503
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server...
CVE-2025-24501
An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request...
CVE-2025-24501
CVE-2025-24501 affects Broadcom Symantec Privileged Access Management (PAM). The provided sources describe an improper input validation that allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request. The impact is log tampering of PAM activity; no evidence o...
CVE-2025-24500
The vulnerability allows an unauthenticated attacker to access information in PAM database...
CVE-2025-24500
The CVE-2025-24500 entry concerns Broadcom Symantec Privileged Access Management (PAM). Multiple connected sources confirm an unauthenticated attacker can access information in the PAM database. No concrete affected versions or root-cause details are provided in the documents; some sources (PT-20...
CVE-2025-24500
The vulnerability allows an unauthenticated attacker to access information in PAM database...
Broadcom Symantec Privileged Access Management 安全漏洞
Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...
Debian: Security Advisory (DSA-5853-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5853-1] pam-u2f security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5853-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 29, 2025 https://www.debian.org/security/faq -...
DSA-5853-1 pam-u2f - security update
Bulletin has no description...
Security Bulletin: IBM DataPower Gateway vulnerable to DoS (CVE-2024-22365)
Summary This vulnerablility may affect database access, and DataPower Virtual Edition. Vulnerability Details CVEID:CVE-2024-22365 DESCRIPTION: Linux-pam is vulnerable to a denial of service, caused by a flaw in pamnamespace.so. By sending a specially crafted request, a local attacker could exploi...
Advisory ROSA-SA-2025-2608
software: pam 1.5.1 OS: ROSA-CHROME packageevrstring: pam-1.5.1-5 CVE-ID: CVE-2024-22365 BDU-ID: 2024-00829 CVE-Crit: LOW CVE-DESC.: A vulnerability in the protectdir pamnamespace.so function of the Linux-PAM authentication module is related to incorrect resource sweep or release. Exploitation of...
Fedora: Security Advisory (FEDORA-2025-b58b563b77)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: pam-u2f-1.3.2-1.fc40
The PAM U2F module provides an easy way to integrate the Yubikey or other U2F-compliant authenticators into your existing user authentication infrastructure...
Fedora 40 : pam-u2f (2025-b58b563b77)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b58b563b77 advisory. pam-u2f 1.3.1 includes a fix to resolve CVE-2025-23013 Partial Authentication Bypass. CVSS score 7.3. 1.3.2 is a fix for a regression that could impact...