Описание
Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorized groups by exploiting a user interface issue.
This issue affects the following versions :
- Devolutions Server 2025.1.3.0 through 2025.1.7.0
- Devolutions Server 2024.3.15.0 and earlier
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2024.3.15.0 (включая)Версия от 2025.1.3.0 (включая) до 2025.1.7.0 (включая)
Одно из
cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*
cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 12%
0.00039
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-266
Связанные уязвимости
CVSS3: 6.5
github
9 месяцев назад
Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorized groups by exploiting a user interface issue. This issue affects the following versions : * Devolutions Server 2025.1.3.0 through 2025.1.7.0 * Devolutions Server 2024.3.15.0 and earlier
EPSS
Процентиль: 12%
0.00039
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-266