CVE-2024-12151: Medium severity devolutions server vulnerability
Published Dec 4, 2024
·Updated
Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users to retain their old permission sets.
Affected Software
2 affected components
Devolutions Server<=2024.3.8.0
Devolutions Devolutions Server<2024.3.9.0
Event History
Dec 4, 2024
CVE Published
via MITRE·05:17 PM
Data Sourced
via MITRE·05:17 PM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-12151?
CVE-2024-12151 is classified as a moderate severity vulnerability due to incorrect permission assignments.
2
How do I fix CVE-2024-12151?
To fix CVE-2024-12151, upgrade to Devolutions Server version 2024.3.9.0 or later.
3
What causes CVE-2024-12151?
CVE-2024-12151 is caused by incorrect permission assignment during the user migration process in Devolutions Server.
4
Who is affected by CVE-2024-12151?
Users of Devolutions Server versions up to and including 2024.3.8.0 are affected by CVE-2024-12151.
5
What impact does CVE-2024-12151 have?
CVE-2024-12151 allows users to retain their old permission sets, potentially leading to unauthorized access.