Vulnerability Database

299,038

Total vulnerabilities in the database

CVE-2025-4493

Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorized groups by exploiting a user interface issue.

This issue affects the following versions :

Devolutions Server 2025.1.3.0 through 2025.1.7.0
Devolutions Server 2024.3.15.0 and earlier

Published: May 28, 2025
Updated: May 29, 2025
CVE: CVE-2025-4493
Exploit:

No technical information available.

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
devolutions / devolutions_server	-	2024.3.15.0.x
devolutions / devolutions_server	2025.1.3.0	2025.1.7.0.x

https://devolutions.net/security/advisories/DEVO-2025-0008/

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo