PAM Password Rotation Vulnerability Allows Denial of Service

CVE-2024-1901

What is CVE-2024-1901?

A denial of service vulnerability exists in Devolutions Server affecting the PAM password rotation functionality during the check-in process. Authenticated users with specific PAM permissions may exploit this vulnerability to render PAM credentials unavailable, potentially impacting system availability and user access. It is crucial for users of Devolutions Server 2023.3.14.0 to evaluate their configurations and implement the necessary security measures to mitigate the risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References