What’s Vulnerable › Vulnerabilities

CVE-2024-1901

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-05 · updated 2026-06-17

Description

Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with specific PAM permissions to make PAM credentials unavailable.

Affected products

• Devolutions Server: through 2023.3.16.0

References

• https://devolutions.net/security/advisories/DEVO-2024-0002
• https://devolutions.net/security/advisories/DEVO-2024-0002

Get alerted when CVE-2024-1901 or the next vulnerability affects your stack