CVE-2024-2915

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request...

CVE-2024-2921

Devolutions Server versions 2024.1.6 and earlier are affected by an improper access control vulnerability in PAM vault permissions . An authenticated user with access to the PAM can exploit a specific set of permissions to access unauthorized PAM entries . While a patch version is not explicitly ...

CVE-2024-2921

Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to the PAM to access unauthorized PAM entries via a specific set of permissions...

CVE-2024-2921

Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to the PAM to access unauthorized PAM entries via a specific set of permissions...

CVE-2024-2915

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request...

CVE-2024-2915

The Devolutions Server software (version 2024.1.6 and earlier ) is susceptible to an improper access control vulnerability within the PAM JIT elevation feature. An attacker who can access this specific feature may submit a specially crafted request to elevate their privileges to unauthorized grou...

CVE-2024-2915

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request...

USN-6588-2 pam vulnerability

USN-6588-1 fixed a vulnerability in PAM. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Matthias Gerstner discovered that the PAM pamnamespace module incorrectly handled special files when performing director...

CVE-2024-2921: Missing Authentication for Critical Function

Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to the PAM to access unauthorized PAM entries via a specific set of permissions...

PT-2024-22766

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2024.1.6 and earlier Description The issue is related to improper access control in the PAM JIT elevation feature, allowing an attacker with access to this feature to elevate themselves to unauthorized groups via a...

PT-2024-22811

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2024.1.6 and earlier Description The issue is related to improper access control in PAM vault permissions, allowing an authenticated user with access to the PAM to access unauthorized PAM entries via a specific set ...

CVE-2024-2915: Incorrect Authorization

Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : PAM vulnerability (USN-6588-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6588-2 advisory. USN-6588-1 fixed a vulnerability in PAM. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu...

SUSE-SU-2024:0939-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn bsc1210507. The following non-security bugs were fixed: - bsc1176006: Fix chage date miscalculation - bsc1188307: Fix passwd segfault - bsc1203823: Remove pamkeyinit from PAM conf...

Delinea PAM Secret Server Access Control Error Vulnerability

Delinea PAM Secret Server is a key service manager from Delinea. An Access Control Error vulnerability exists in Delinea PAM Secret Server version 11.4, which can be exploited by an attacker to view system reports and modify customized reports via the Reports feature in the Web UI when Unrestrict...

Delinea PAM Secret Server Trust Management Issue Vulnerability

Delinea PAM Secret Server is a key service manager from Delinea. A trust management issue vulnerability exists in Delinea PAM Secret Server version 11.4, which can be exploited by an attacker to obtain symmetric keys and sensitive information via a crafted payload...

Delinea PAM Secret Server User Enumeration Vulnerability

Delinea PAM Secret Server is a key service manager from Delinea. A user enumeration vulnerability exists in Delinea PAM Secret Server version 11.4, which stems from a significant difference between valid and invalid login attempts, and can be exploited by a remote attacker to determine whether a...

Delinea PAM Secret Server Information Disclosure Vulnerability

Delinea PAM Secret Server is a key service manager from Delinea. An information disclosure vulnerability exists in Delinea PAM Secret Server version 11.4, which can be exploited by an attacker to read data from a memory dump...

CVE-2024-25653

Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI...

CVE-2024-25652

In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functionality via UNLIMITED ADMIN MODE with access to the Report functionality to gain unauthorized access to remote sessions created by legitimate users through...