CPE Details
Devolutions Server 2024.3.17.0
2024.3.17.0
2025-06-17
16h52 +00:00
16h52 +00:00
2025-06-17
16h52 +00:00
16h52 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:devolutions:devolutions_server:2024.3.17.0:*:*:*:*:*:*:*
Informations
Vendor
devolutionsProduct
devolutions_serverVersion
2024.3.17.0Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its intended check-out period due to a deadlock occurring in the scheduling service.This issue affects the following version(s) : * Devolutions Server 2025.2.2.0 through 2025.2.5.0 * Devolutions Server 2025.1.12.0 and earlier | 7.1 |
High |
||
| UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 and earlier allows a remote authenticated attacker to gain unauthorized access to deleted JIT Groups via stale UI state during standard checkout request processing. | 5.9 |
Medium |
||
| Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user management permission to remove or change administrators MFA. | 6.8 |
Medium |
||
| Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the tor blocking feature when the Devolutions hosted endpoint is not reachable. | 5 |
Medium |
||
| Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrative user with both "User Management" and "User Group Management" permissions to perform privilege escalation by adding users to groups with administrative privileges. | 8.8 |
High |
