CVE-2024-38492 Symantec Privileged Access Manager Remote Command Execution vulnerability

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file...

CVE-2024-38492

CVE-2024-38492 affects Broadcom Symantec Privileged Access Management (PAM). The issue is a file-upload vulnerability where unauthenticated attackers can upload a crafted PAM upgrade file to achieve remote command execution on the PAM system. Root cause cited across sources is the lack of effecti...

CVE-2024-36458

CVE-2024-36458 affects Broadcom Symantec Privileged Access Management (PAM). The available documents confirm that a malicious, low-privileged PAM user can perform server upgrade related actions, indicating a privilege-escalation path within PAM components. The incident description is consistent a...

CVE-2024-36458 Symantec Privileged Access Manager Privilege Escalation vulnerability

The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions...

CVE-2024-36457 Symantec Privileged Access Manager Authentication Bypass vulnerability

The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint...

CVE-2024-36457 Symantec Privileged Access Manager Authentication Bypass vulnerability

The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint...

CVE-2024-36457

CVE-2024-36457 describes an authentication bypass in Broadcom Symantec Privileged Access Management (PAM). The vulnerability allows bypassing authentication on a specific PAM endpoint (CVSSv4 5.3, ADJACENT access, LOW attack complexity, no user interaction required). Connected documents confirm B...

CVE-2024-36456

CVE-2024-36456 affects Broadcom Symantec Privileged Access Management (PAM). A code injection vulnerability allows an unauthenticated attacker to achieve remote command execution on the PAM system by uploading a specially crafted PAM upgrade file. Impact is high (remote code execution, confidenti...

CVE-2024-36456 Symantec Privileged Access Manager Remote Command Execution vulnerability

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file...

CVE-2024-36456 Symantec Privileged Access Manager Remote Command Execution vulnerability

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file...

CVE-2024-36455 Symantec Privileged Access Manager Remote Command Execution vulnerability

An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request...

PT-2024-28032 · Pam · Pam

Name of the Vulnerable Software and Affected Versions: PAM system affected versions not specified Description: The issue allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file. Recommendations: At the...

PT-2024-28033 · Pam Ui · Pam Ui

Name of the Vulnerable Software and Affected Versions: PAM UI affected versions not specified Description: A reflected cross-site scripting XSS issue exists in the PAM UI web interface, allowing a remote attacker to potentially execute arbitrary client-side code if a PAM user clicks on a speciall...

PT-2024-28036 · Pam · Pam

Name of the Vulnerable Software and Affected Versions: PAM affected versions not specified Description: The issue allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships. Recommendations: At the moment, there is no information about a new...

Broadcom Symantec Privileged Access Management 安全漏洞

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

PT-2024-27011 · Pam · Pam

Name of the Vulnerable Software and Affected Versions: PAM affected versions not specified Description: The issue allows an attacker to bypass the authentication requirements for a specific PAM endpoint. Recommendations: At the moment, there is no information about a newer version that contains a...

Broadcom Symantec Privileged Access Management 安全漏洞

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

Streamlined Security Solutions: PAM for Small to Medium-sized Businesses

Today, all organizations are exposed to the threat of cyber breaches, irrespective of their scale. Historically, larger companies were frequent targets due to their substantial resources, sensitive data, and regulatory responsibilities, whereas smaller entities often underestimated their...

CVE-2024-6126

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pamenv's userreadenv option, which leads to a denial of service DoS attack. Mitigation Disable pamenv's userreadenv option in PAM config...

Cockpit Resource Management Error Vulnerability

Cockpit is an interactive server management interface for the Cockpit open source. Cockpit suffers from a resource management error vulnerability that originates from allowing an authenticated user to terminate any process when the userreadenv option of pamenv is enabled, resulting in a denial of...