Remote Command Execution Vulnerability in Symantec Identity Manager by Broadcom
CVE-2022-25627

6.7MEDIUM

Key Information:

Vendor

Broadcom
Status
Symantec Identity Governance And Administration
Vendor
CVE Published:
16 December 2022

What is CVE-2022-25627?

An authenticated administrator with physical access to the environment can exploit a vulnerability in Symantec Identity Manager 14.4, allowing them to execute arbitrary commands remotely on the Management Console. This could potentially lead to unauthorized access and manipulation of sensitive data. Organizations using this version should take immediate precautions to secure their environments.

Affected Version(s)

Symantec Identity Governance and Administration 14.3, 14.4

References

https://support.broadcom.com/external/content/SecurityAdv...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.