Auth bypass in Broadcom Symantec Privileged Access Management

CVE-2025-24500

The vulnerability allows an unauthenticated attacker to access information in PAM database.

Vulnerability class: Broken Access Control

EPSS: 0.002 (13.1th percentile) — read the EPSS interpretation.