← All advisories

Critical severityNVD Advisory· Published Jan 30, 2025· Updated Jun 17, 2026

CVE-2025-24503

CVE-2025-24503

Description

A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server.

Affected products

1

Broadcom Corporation/PAMllm-fuzzy

Patches

Vulnerability mechanics

References

1

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362nvd

News mentions

0

No linked articles in our index yet.