Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-4493 EUVD-2025-16300GHSA-gffr-g4h9-f8x5

Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorized…

Published May 28, 2025 · Updated May 28, 2025 · Assigned by DEVOLUTIONS

Description

Improper privilege assignment in PAM JIT privilege sets in Devolutions
Server allows a PAM user to perform PAM JIT
requests on unauthorized groups by exploiting a user interface issue.

This issue affects the following versions : 

* Devolutions Server 2025.1.3.0 through 2025.1.7.0
* Devolutions Server 2024.3.15.0 and earlier

Affected products

VendorProductAffectedFixed
Devolutions Server 2025.1.3.0 – ≤ 2025.1.7.0, ≤ 2024.3.15.0 —

References