Portal
Forum
Devolutions Force
Hub Business
Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Security & Compliance
DEVO-2024-0013
Summary
Devolutions Server is affected by a vulnerability.
Affected Products
Devolutions Server 2024.2.10.0 and earlier
Change Log
2024-09-25 - Initial publication 2024-10-01 - Initial publication
Severity
Medium
Products
Devolutions Server
Fix Version
2024.2.12.0
Incorrect Authorization via PAM module
Description
Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism.
Remediation and Workarounds
Upgrade to Devolutions Server to 2024.3 and higher
Severity
Medium - CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products
Devolutions Server 2024.2.10.0 and earlier
CVE(s)
CVE-2024-6512
