CVE-2024-12151 - AskarLabs CVE Database

CVE-2024-12151

Vendor Devolutions

Product Server

Weakness CWE-732

Published December 4, 2024

Last update December 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users to retain their old permission sets.

Key dates

02Disclosure timeline

December 4, 2024 CVE published

December 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-12151 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/732.html

Related vulnerabilities

04Related CVE

CVE-2024-10228 Vagrant VMWare Utility installation files vulnerable to modification by unprivileged user CVE-2021-24703 Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation CVE-2021-3557 CVE-2025-30063 Excessive permissions on configuration files containing database logins and passwords CVE-2026-28264