A vulnerability was found in Broadcom Symantec Privileged Access Management up to 3.4.6/4.1.8/4.2.0. It has been rated as critical. This issue affects some unknown processing of the component PAM Server. The manipulation leads to session fixiation.

The identification of this vulnerability is CVE-2025-24503. The attack can only be done within the local network. There is no exploit available.