Vulnerability in Broadcom Symantec Privileged Access Management
CVE-2025-24503
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server.
EPSS: 0.002 (14.2th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Symantec Privileged Access Management — versions 3.4.6, 4.1.0, 4.2.0