Devolutions Server < 2024.3.17 / 2025.1.3 < 2025.1.7 Improper Access Control (DEVO-2025-0007)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(237412);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/21");

  script_cve_id("CVE-2025-4316");
  script_xref(name:"IAVB", value:"2025-B-0083-S");

  script_name(english:"Devolutions Server < 2024.3.17 / 2025.1.3 < 2025.1.7 Improper Access Control (DEVO-2025-0007)");

  script_set_attribute(attribute:"synopsis", value:
"The Devolutions Server instance installed on the remote host is affected by a Improper access control vulnerabilitiy.");
  script_set_attribute(attribute:"description", value:
"The version of Devolutions Server installed on the remote host is prior to 2024.3.17.0 / 2025.1.6.0 and is, therefore,
affected by a Improper Access Control vulnerability where improper access control in PAM feature in Devolutions Server 
allows a PAM user to self approve their PAM requests even if disallowed by the configured policy via specific user 
interface actions.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://devolutions.net/security/advisories/DEVO-2025-0007");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Devolutions Server version 2024.3.17.0 or 2.25.1.7.0 or later.");
  script_set_attribute(attribute:"agent", value:"windows");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-4316");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/05/05");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/05/14");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/05/28");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"x-cpe:/a:devolutions:remote_server");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("devolutions_server_win_installed.nbin");
  script_require_keys("installed_sw/Devolutions Server", "SMB/Registry/Enumerated");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Devolutions Server', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints' : [
        { 'max_version':'2024.3.16.0', 'fixed_version':'2024.3.17.0' },
        { 'min_version': '2025.1.3.0', 'fixed_version':'2025.1.7.0' }      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);