CVE-2025-24503
A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server.
More information : https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24678