Cyber Resilience

CVE-2024-2918

Devolutions Server ≤ 2024.1.11.0

Published
09 April 2024
Modified
17 June 2026
Patch / advisory
View advisory
CVSS Score v3.1 3.6
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS Score 0.0024 16th percentile
Risk Priority 30 floored blend · peak EPSS

Summary

CVE-2024-2918 is a low-severity an unspecified weakness vulnerability in Devolutions Devolutions Server. Its CVSS base score is 3.6 (Low).

Operationally, ranked at the 16th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to forge the displayed group in the PAM JIT elevation checkout request via a specially…

more

crafted request.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2026-3221Same product: Devolutions Devolutions Server
CVE-2026-15642Same product: Devolutions Devolutions Server
CVE-2026-0610Same product: Devolutions Devolutions Server
CVE-2026-9251Same product: Devolutions Devolutions Server
CVE-2024-2921Same product: Devolutions Devolutions Server
CVE-2025-13765Same product: Devolutions Devolutions Server
CVE-2026-9247Same product: Devolutions Devolutions Server
CVE-2025-2278Same product: Devolutions Devolutions Server
CVE-2025-12485Same product: Devolutions Devolutions Server
CVE-2023-2400Same product: Devolutions Devolutions Server

Affected Assets

devolutions
devolutions server
≤ 2024.1.11.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References