NuytsTech Security

CVE-2025-4493

by ·

Improper privilege assignment in PAM JIT privilege sets in Devolutions
Server allows a PAM user to perform PAM JIT
requests on unauthorized groups by exploiting a user interface issue.

This issue affects the following versions : 

* Devolutions Server 2025.1.3.0 through 2025.1.7.0
* Devolutions Server 2024.3.15.0 and earlier

Assigner : security@devolutions.net

More information : https://devolutions.net/security/advisories/DEVO-2025-0008/

Tags: