VULNERABILITY INTELLIGENCE

CVE-2025-24501

EPSS probability0.29%
CISA KEVNot currently listed
Published2025-01-30
Last modified2026-06-17

Description

An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request.

Weakness classification

  • secure@symantec.com: CWE-20

Primary references