CVE

CVE-2024-2921

Date: (C)2024-03-27   (M)2024-04-11

Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to the PAM to access unauthorized PAM entries via a specific set of permissions.

Reference:

https://devolutions.net/security/advisories/DEVO-2024-0005