Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-38495

Symantec Privileged Access Manager User Enumeration vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
symantec

Description

A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Broadcom Symantec Privileged Access Management

Default version status: unaffected

  • 4.1.0 - 4.1.7affected
  • 3.4.6affected

References