VULNERABILITY INTELLIGENCE
CVE-2024-1901
CVSS score4.3 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2024-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with specific PAM permissions to make PAM credentials unavailable.
Primary references
- security@devolutions.net — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory