CVE-2024-6512 — Devolutions / Devolutions Server

CVE-2024-6512

Devolutions / Devolutions Server PUBLISHED

Description (CNA)

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism.

Affected (CNA)

Vendor / product	Versions
Devolutions / Devolutions Server	affected 0 through 2024.2.10.0

CWE

CWE-863

References

https://devolutions.net/security/advisories/DEVO-2024-0013

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.