A vulnerability was found in Broadcom Symantec Privileged Access Management up to 3.4.6/4.1.8. It has been classified as critical. This affects an unknown part of the component PAM. The manipulation leads to unrestricted upload.
This vulnerability is uniquely identified as CVE-2025-24505. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.