CVE-2024-36455: Symantec Privileged Access Manager Remote Command Execution vulnerability
Published Jul 15, 2024
·Updated
An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.
Affected Software
1 affected component
Symantec Privileged Access Manager
Event History
Jul 15, 2024
CVE Published
via MITRE·01:19 PM
Data Sourced
via MITRE·01:19 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-36455?
CVE-2024-36455 is considered a high severity vulnerability due to the potential for remote command execution.
2
How do I fix CVE-2024-36455?
To fix CVE-2024-36455, you should apply the security patches provided by Symantec for the Privileged Access Manager.
3
Who is affected by CVE-2024-36455?
CVE-2024-36455 affects users of the Symantec Privileged Access Manager that have not applied the necessary security updates.
4
What type of attack does CVE-2024-36455 involve?
CVE-2024-36455 involves an unauthenticated remote command execution attack due to improper input validation.
5
Can CVE-2024-36455 be exploited without authentication?
Yes, CVE-2024-36455 can be exploited by an unauthenticated attacker, making it particularly dangerous.