admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-11-28 18:48:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-6512.md
0xMarcio 1fb02038e8 Update CVE sources 2025-09-29 16:08
2025-09-29 16:08:36 +00:00

18 lines
826 B
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

### [CVE-2024-6512](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6512)
![](https://img.shields.io/static/v1?label=Product&message=Devolutions%20Server&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%3D%202024.2.10.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-863%3A%20Incorrect%20Authorization&color=brighgreen)
### Description
Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism.
### POC
#### Reference
- https://devolutions.net/security/advisories/DEVO-2024-0013
#### Github
No PoCs found on GitHub currently.
Reference in New Issue View Git Blame Copy Permalink