CVE-2022-25625: Broadcom Symantec Privileged Access Management

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A malicious unauthorized PAM user can access the administration configuration data and change the values.

Affected products

• Broadcom Symantec Privileged Access Management: from 3.4.0.0, before 3.4.6.05 (fixed in 3.4.6.05); from 4.0.0.0, before 4.0.0.05 (fixed in 4.0.0.05); from 4.0.1.0, before 4.0.1.19 (fixed in 4.0.1.19); from 4.0.2.0, before 4.0.2.04 (fixed in 4.0.2.04); from 4.0.3.0, before 4.0.3.01 (fixed in 4.0.3.01); from 4.1.0.0, before 4.1.0.10 (fixed in 4.1.0.10)

Published 2022-08-26. Last modified 2026-06-17.