CVE-2025-4493

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://devolutions.net/security/advisories/DEVO-2025-0008/", "name": "https://devolutions.net/security/advisories/DEVO-2025-0008/", "tags": ["Vendor Advisory"], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Improper privilege assignment in PAM JIT privilege sets in Devolutions \nServer allows a PAM user to perform PAM JIT \nrequests on unauthorized groups by exploiting a user interface issue.\n\n\nThis issue affects the following versions :\u00a0\n\n * Devolutions Server 2025.1.3.0 through 2025.1.7.0\n * Devolutions Server 2024.3.15.0 and earlier"}]}, "problemtype": {"problemtype_data": [{"description": []}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2025-4493", "ASSIGNER": "security@devolutions.net"}}, "impact": {}, "publishedDate": "2025-05-28T13:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2024.3.15.0"}, {"cpe23Uri": "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2025.1.7.0", "versionStartIncluding": "2025.1.3.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-06-25T15:48Z"}