cbcvebase.
CVE-2025-4493
published 2025-05-28

CVE-2025-4493: Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorized groups by…

PriorityP336medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
0.31%
22.8th percentile
Improper privilege assignment in PAM JIT privilege sets in Devolutions
Server allows a PAM user to perform PAM JIT
requests on unauthorized groups by exploiting a user interface issue.


This issue affects the following versions :

* Devolutions Server 2025.1.3.0 through 2025.1.7.0
* Devolutions Server 2024.3.15.0 and earlier

Affected

4 ranges
VendorProductVersion rangeFixed in
devolutionsdevolutions_server<= 2024.3.15.0—
devolutionsdevolutions_server2025.1.3.0 – 2025.1.7.0—
devolutionsserver<= 2024.3.15.0—
devolutionsserver2025.1.3.0 – 2025.1.7.0—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.