PT-2024-22766
CVE-2024-2915
·
تاريخ النشر
2024-03-26
·
تاريخ التحديث
2025-03-27
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Devolutions Server versions 2024.1.6 and earlier
Description
The issue is related to improper access control in the PAM JIT elevation feature, allowing an attacker with access to this feature to elevate themselves to unauthorized groups via a specially crafted request.
Recommendations
For Devolutions Server versions 2024.1.6 and earlier, consider restricting access to the PAM JIT elevation feature until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾