Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenticated user with access to the PAM JIT elevation feature to manipulate the LDAP filter query via a specially crafted request.
References
| Link | Resource |
|---|---|
| https://devolutions.net/security/advisories/DEVO-2024-0007 | Vendor Advisory |
| https://devolutions.net/security/advisories/DEVO-2024-0007 | Vendor Advisory |
Configurations
History
28 Mar 2025, 16:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://devolutions.net/security/advisories/DEVO-2024-0007 - Vendor Advisory | |
| CWE | NVD-CWE-noinfo | |
| First Time |
Devolutions devolutions Server
Devolutions |
|
| CPE | cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:* |
Information
Published : 2024-05-17 16:15
Updated : 2025-03-28 16:22
NVD link : CVE-2024-5072
Mitre link : CVE-2024-5072
CVE.ORG link : CVE-2024-5072
JSON object : View
Products Affected
devolutions
- devolutions_server
CWE