CVE-2025-24502 | Broadcom Symantec Privileged Access Management up to 3.4.6/4.1.8/4.2.0 Request Notifications improper authentication

A vulnerability classified as critical was found in Broadcom Symantec Privileged Access Management up to 3.4.6/4.1.8/4.2.0. This vulnerability affects unknown code of the component Request Notifications Handler. The manipulation leads to improper authentication.

This vulnerability was named CVE-2025-24502. The attack can only be done within the local network. There is no exploit available.