CVE-2024-2915: High severity devolutions server vulnerability
Published Mar 26, 2024
·Updated
Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request.
Affected Software
2 affected components
Devolutions Server<=2024.1.6
Devolutions Devolutions Server<2024.1.8.0
Event History
Mar 26, 2024
CVE Published
via MITRE·03:51 PM
Data Sourced
via MITRE·03:51 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-2915?
CVE-2024-2915 has been classified as a high severity vulnerability due to improper access control in PAM JIT elevation.
2
How do I fix CVE-2024-2915?
To fix CVE-2024-2915, upgrade Devolutions Server to version 2024.1.7 or later.
3
Who is affected by CVE-2024-2915?
CVE-2024-2915 affects all versions of Devolutions Server up to and including 2024.1.6.
4
What type of vulnerability is CVE-2024-2915?
CVE-2024-2915 is an improper access control vulnerability that allows unauthorized elevation of privileges.
5
Can exploitation of CVE-2024-2915 lead to data loss?
Yes, exploitation of CVE-2024-2915 can potentially lead to unauthorized access to sensitive information or data.