Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-6512 EUVD-2024-47596GHSA-vx7x-qwmp-h33c

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users wi…

Published Sep 25, 2024 · Updated Mar 14, 2025 · Assigned by DEVOLUTIONS

Description

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism.

Affected products

VendorProductAffectedFixed
Devolutions Devolutions Server ≤ 2024.2.10.0 —

References