Threats tagged 'ghsa-qmr2-hh8c-f2cv'

A missing authorization vulnerability exists in the PAM AD computer import endpoint of Devolutions Server versions 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier. This flaw allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing Active Directory providers by sending a crafted import request.