CVE-2025-24508 MEDIUM

CVE-2025-24508: Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite

Vendor Broadcom
Product Symantec IT Management Suite
Published July 7, 2025
Last update July 7, 2025
View on NVD All CVEs

CVSS base score

6.4/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage

Key dates

02Disclosure timeline

July 7, 2025 CVE published
July 7, 2025 Record updated