Sécurité et conformité
Nous respectons les normes les plus élevées pour protéger vos données et garantir la confiance.
DEVO-2024-0005
Devolutions Server is affected by multiple vulnerabilities
Produits affectés
Journal des modifications
2024-03-26 - Initial publication
8.5 High - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H
Improper access control in PAM JIT elevation feature
Improper access control in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups in AD or Entra ID via a specially crafted request.
Produits affectés
CVE(s)
CVE-2024-2915
Mesures correctives et solutions de contournement
Update to Devolutions Server 2024.1.8 or higher
5.9 Medium - CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Improper access control in PAM vault permissions
Improper access control in PAM vault permissions in Devolutions Server 2024.1.6 and earlier allows an authenticated user with access to the PAM to access unauthorized PAM entries via a specific set of permissions.
Produits affectés
CVE(s)
CVE-2024-2921
Mesures correctives et solutions de contournement
Upgrade to Devolutions Server 2024.1.8 or higher