MENU PRINCIPAL
Solutions

Packages

blue box

Full power for small teams

All products available in our Starter Pack at half price for teams of 5

Comparer toutes nos solutions

Vue d'ensemble rapide

Personalized trial for 100+ users

Free expert or self-guided proof of concept for up to 90 days

Seamless integrations with RDM

Browse our 100+ integrations and boost your productivity

Sécurité et conformité

Nous respectons les normes les plus élevées pour protéger vos données et garantir la confiance.

DEVO-2024-0007

Devolutions Server is affected by a vulnerability.

Produits affectés

Devolutions Server
2024.1.11.0 and earlier

Journal des modifications

17/5/2024 - Initial publication

Medium 6.0 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Improper input validation in PAM JIT elevation feature allows LDAP injection

Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenticated user with access to the PAM JIT elevation feature to manipulate the LDAP filter query via a specially crafted request.

Produits affectés

CVE(s)

CVE-2024-5072

Mesures correctives et solutions de contournement

Upgrade to Devolutions Server 2024.1.12.0 or higher