Skip to content
OpenAdvisories
High · 8.8 CVE-2024-2915 EUVD-2024-27858GHSA-76jh-m3c4-gxgj

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT eleva…

Published Mar 26, 2024 · Updated Oct 28, 2024 · Assigned by DEVOLUTIONS

Description

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request.

Affected products

VendorProductAffectedFixed
Devolutions Server ≤ 2024.1.6 —

References