Description (CNA)
Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Devolutions / Server | affected 2026.3.5.0 before 2026.3.11 |
| Devolutions / Server | affected 0 before 2026.2.21 |
CWE
CWE-862