CVE-2025-3517

MEDIUM Year: 2025
CVSS v3 Score
6.3
Medium
Weakness Type
CWE-266
View all →

Vulnerability Description

Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a previously configured user configured in a PAM JIT account via failure to update the internal account’s SID when updating the username.

Related Vulnerabilities

CVE-2024-12235

MEDIUM
CVSS:6.3(Medium)

A vulnerability was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 1.0.0. It has been declared as critical. Affected by this vulnerability is the function doFilter of the file ...

CWE-2662024

CVE-2024-13211

MEDIUM
CVSS:6.3(Medium)

A vulnerability was found in SingMR HouseRent 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/main/java/com/house/wym/controller/AdminControlle...

CWE-2662024

CVE-2024-46540

MEDIUM
CVSS:6.3(Medium)

A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells t...

CWE-2662024

CVE-2025-0783

MEDIUM
CVSS:6.3(Medium)

A vulnerability, which was classified as problematic, was found in pankajindevops scale up to 20241113. This affects an unknown part of the component API Endpoint. The manipulation leads to improper a...

CWE-2662025

CVE-2025-3256

MEDIUM
CVSS:6.3(Medium)

A vulnerability was found in xujiangfei admintwo 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/updateSet. The manipulation of the argument ...

CWE-2662025

CVE-2025-3398

MEDIUM
CVSS:6.3(Medium)

A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/src/main/java/org/sang/config/WebSecurityCo...

CWE-2662025