← Database

CVE-2025-3517

MEDIUM CVSS: 6.3 Published: 2025-05-01 Modified: 2026-06-17

Description

Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a previously configured user configured in a PAM JIT account via failure to update the internal account’s SID when updating the username.

Affected Platforms

Devolutions Devolutions Server

Weakness Type

CWE-266

References