« Volver al listado

CVE-2022-25625

Estado: ModificadaAlta (8.8)—

A malicious unauthorized PAM user can access the administration configuration data and change the values.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Broadcom — Symantec Privileged Access Management

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-25625",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@symantec.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Symantec Privileged Access Management (PAM)",
          "versions": [
            {
              "status": "affected",
              "version": "4.1.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-08-26T16:15:09.873",
  "references": [
    {
      "url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/20850",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@symantec.com"
    },
    {
      "url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/20850",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A malicious unauthorized PAM user can access the administration configuration data and change the values."
    },
    {
      "lang": "es",
      "value": "Un usuario PAM malicioso y no autorizado puede acceder a los datos de configuración de la administración y cambiar los valores."
    }
  ],
  "lastModified": "2026-06-17T04:33:47.650",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:broadcom:symantec_privileged_access_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C553C252-9856-4069-A9CC-73900EB665F5",
              "versionEndExcluding": "3.4.6.05",
              "versionStartIncluding": "3.4.0.0"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:symantec_privileged_access_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "008EC9B0-D398-4E77-B057-8A6FBD9C08CD",
              "versionEndExcluding": "4.0.0.05",
              "versionStartIncluding": "4.0.0.0"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:symantec_privileged_access_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D06FBB2-1C56-42DC-8158-DAFE9BD7B530",
              "versionEndExcluding": "4.0.1.19",
              "versionStartIncluding": "4.0.1.0"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:symantec_privileged_access_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF9503AD-E428-4F87-9D4A-F1BBB76FA8DA",
              "versionEndExcluding": "4.0.2.04",
              "versionStartIncluding": "4.0.2.0"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:symantec_privileged_access_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB547301-C74C-4A3C-8433-762554A674EC",
              "versionEndExcluding": "4.0.3.01",
              "versionStartIncluding": "4.0.3.0"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:symantec_privileged_access_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6AAA89A9-0EF2-4002-B961-EC4DBF1AC001",
              "versionEndExcluding": "4.1.0.10",
              "versionStartIncluding": "4.1.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@symantec.com"
}