CVE-2025-24508

MEDIUM

IT Management Agent - Info Disclosure

Title source: llm

Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage

CVSS v3 6.4

EPSS 0.0002

EPSS Percentile 4.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-522

Status published

Products (1)

Broadcom/Symantec IT Management Suite 8.6.x, 8.7.x 8.8

Published Jul 07, 2025

Tracked Since Feb 18, 2026