CVE-2024-6512

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Sep 25, 2024
Updated: Mar 14, 2025
CWE ID 863

Summary

CVE-2024-6512 is a vulnerability affecting Devolutions Server 2024.2.10 and earlier versions. This issue involves an authorization bypass in the Privileged Access Management (PAM) access request approval mechanism. Authenticated users with approval permissions can bypass intended security restrictions and approve their own requests, undermining the intended access controls.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Devolutions Server

Affected Vendors

  • Devolutions

Advisories, Assessments, and Mitigations