{ "id": "CVE-2024-1764", "sourceIdentifier": "security@devolutions.net", "published": "2024-03-05T22:15:46.947", "lastModified": "2024-03-06T15:18:08.093", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Improper privilege management in Just-in-time (JIT) elevation module in Devolutions Server 2023.3.14.0 and earlier allows a user to continue using the elevated privilege even after the expiration under specific circumstances\n\n\n" }, { "lang": "es", "value": "La gesti\u00f3n inadecuada de privilegios en el m\u00f3dulo de elevaci\u00f3n Justo a tiempo (JIT) en Devolutions Server 2023.3.14.0 y versiones anteriores permite que un usuario contin\u00fae usando el privilegio elevado incluso despu\u00e9s de su vencimiento en circunstancias espec\u00edficas." } ], "metrics": {}, "weaknesses": [ { "source": "security@devolutions.net", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-269" } ] } ], "references": [ { "url": "https://devolutions.net/security/advisories/DEVO-2024-0002", "source": "security@devolutions.net" } ] }