PAM JIT Elevation Feature Vulnerability
CVE-2024-5072

6.5MEDIUM

Key Information:

Vendor

Devolutions

Status
Server
Vendor
CVE Published:
17 May 2024

What is CVE-2024-5072?

Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenticated user with access to the PAM JIT elevation feature to manipulate the LDAP filter query via a specially crafted request.

Affected Version(s)

Server 0 <= 2024.1.11.0

References

https://devolutions.net/security/advisories/DEVO-2024-0007

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.