Beveiligingsadvies

CVE-2026-12755

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-25 13:12:54

Laatst bijgewerkt 2026-06-25 14:52:29

Toegewezen door DEVOLUTIONS

CVSS-score 2.7

Status PUBLISHED

Beschrijving

Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated user with the UserGroupsView permission to coerce server-side authentication to an attacker-controlled host, exposing PAM provider credentials as a NTLMv2 challenge-response, via a crafted DomainName parameter.

← Alle CVE's bekijken Bekijk op cve.org ↗