CVE Vulnerabilities

CVE-2022-25626

Published: Dec 16, 2022 | Modified: Apr 18, 2025
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.

Affected Software

NameVendorStart VersionEnd Version
Symantec_identity_governance_and_administrationBroadcom14.3 (including)14.3 (including)
Symantec_identity_governance_and_administrationBroadcom14.4 (including)14.4 (including)

References