CVE-2024-6512CWE-863

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to…

Medium · published September 25, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-09-25T13:55Z
EPSS history
Timeline
  • 25 SEP 13:55Z
    Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to…
    cvelistv5