CVE-2025-4493

CVE-2025-4493

Vendor Devolutions

Product Server

Weakness CWE-266

Published May 28, 2025

Last update May 28, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorized groups by exploiting a user interface issue. This issue affects the following versions : * Devolutions Server 2025.1.3.0 through 2025.1.7.0 * Devolutions Server 2024.3.15.0 and earlier

Key dates

02Disclosure timeline

May 28, 2025 CVE published

May 28, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-4493 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/266.html

Related vulnerabilities

Identifiers

CVE CVE-2025-4493

CWE CWE-266

Affected versions

Vendor Devolutions

Product Server

Affected ≥ 2025.1.3.0 and ≤ 2025.1.7.0

Vendor Devolutions

Product Server

Affected ≤ 2024.3.15.0

01Description

02Disclosure timeline

03References

04Related CVE