Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to forge the displayed group in the PAM JIT elevation checkout request via a specially crafted request.
References
| Link | Resource |
|---|---|
| https://devolutions.net/security/advisories/DEVO-2024-0006 | Vendor Advisory |
| https://devolutions.net/security/advisories/DEVO-2024-0006 | Vendor Advisory |
Configurations
History
28 Mar 2025, 16:20
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:* | |
| References | () https://devolutions.net/security/advisories/DEVO-2024-0006 - Vendor Advisory | |
| First Time |
Devolutions
Devolutions devolutions Server |
21 Nov 2024, 09:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://devolutions.net/security/advisories/DEVO-2024-0006 - |
07 Nov 2024, 00:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.6 |
09 Apr 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-09 19:15
Updated : 2025-03-28 16:20
NVD link : CVE-2024-2918
Mitre link : CVE-2024-2918
CVE.ORG link : CVE-2024-2918
JSON object : View
Products Affected
devolutions
- devolutions_server
CWE