VYPR
Unrated severityNVD Advisory· Published Mar 26, 2024· Updated Oct 28, 2024

CVE-2024-2915

CVE-2024-2915

Description

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request.

Affected products

2
  • Kaltura/Serverllm-fuzzy
    Range: <=2024.1.6
  • Devolutions/Serverv5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.