CoreCVE
Back

MEDIUM

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism

Published Sep 25, 2024

Description

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-863

Incorrect Authorization

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner DEVOLUTIONS
Published Sep 25, 2024
Updated Mar 14, 2025
Reserved Jul 4, 2024
Link CVE-2024-6512
CISA Vulnrichment
Updated Sep 25, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2024-6512
Red Hat
Severity n/a
Public date n/a
Links CVE-2024-6512