Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-76jh-m3c4-gxgj

Опубликовано: 26 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request.

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request.

EPSS

Процентиль: 48%
0.0025
Низкий

8.8 High

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 8.8
nvd
почти 2 года назад

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request.

EPSS

Процентиль: 48%
0.0025
Низкий

8.8 High

CVSS3

Дефекты

CWE-284
CWE-863