Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-2921 EUVD-2024-27864GHSA-v5w3-8cw8-83hq

Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to …

Published Mar 26, 2024 · Updated Nov 7, 2024 · Assigned by DEVOLUTIONS

Description

Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to the PAM to access unauthorized PAM entries via a specific set of permissions.

Affected products

VendorProductAffectedFixed
Devolutions Server ≤ 2024.1.6 —

References