CVE-2022-25625

Published: Aug 26, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A malicious unauthorized PAM user can access the administration configuration data and change the values.

Products: Broadcom: Symantec Privileged Access Management

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Broadcom Symantec Privileged Access Management	From 3.4.0.0 to 3.4.6.05
Broadcom Symantec Privileged Access Management	From 4.0.0.0 to 4.0.0.05
Broadcom Symantec Privileged Access Management	From 4.0.1.0 to 4.0.1.19
Broadcom Symantec Privileged Access Management	From 4.0.2.0 to 4.0.2.04
Broadcom Symantec Privileged Access Management	From 4.0.3.0 to 4.0.3.01
Broadcom Symantec Privileged Access Management	From 4.1.0.0 to 4.1.0.10

Source: secure@symantec.com

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

No history available yet.