Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-3517 EUVD-2025-13258GHSA-qrhc-f2qm-32m6

Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a pre…

Published May 1, 2025 · Updated May 2, 2025 · Assigned by DEVOLUTIONS

Description

Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a previously configured user configured in a PAM JIT account via failure to update the internal account’s SID when updating the username.

Affected products

VendorProductAffectedFixed
Devolutions Devolutions Server ≤ 2025.1.5.0 —

References