Cyber Resilience

CVE-2024-2918

Low

Published: 09 April 2024

Published
09 April 2024
Modified
28 March 2025
KEV Added
—
Patch
—
CVSS Score v3.1 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS Score 0.0014 34.1th percentile
Risk Priority 7 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-2918 is a low-severity an unspecified weakness vulnerability in Devolutions Devolutions Server. Its CVSS base score is 3.6 (Low).

Operationally, ranked at the 34.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to forge the displayed group in the PAM JIT elevation checkout request via a specially…

more

crafted request.

CWE(s)
NVD-CWE-noinfo

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

devolutions
devolutions server
≤ 2024.1.11.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References