CVE-2024-1764: Privilege Escalation in Devolutions Server

The core impact of CVE-2024-1764 lies in the potential for unauthorized privilege persistence. An attacker who successfully leverages this vulnerability could bypass intended access controls and maintain elevated privileges longer than permitted. This could lead to data breaches, unauthorized modifications to system configurations, or other malicious activities. The scope of the impact depends on the privileges granted through the JIT elevation module and the sensitivity of the data and resources accessible with those privileges. Successful exploitation could allow an attacker to perform actions they would otherwise be restricted from, effectively circumventing the intended security measures of the JIT elevation process.

1. Reserved2024-02-22
2. Published2024-03-05
3. Modified2024-12-04
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-1764 is to upgrade Devolutions Server to version 2023.3.15 or later. This version includes a fix that addresses the improper privilege management issue. If an immediate upgrade is not feasible, consider temporarily restricting access to sensitive resources managed by the JIT elevation module. While a direct workaround is not available, closely monitor user activity and audit logs for any suspicious behavior that might indicate exploitation. After upgrading, confirm the fix by testing the JIT elevation process and verifying that privileges expire as expected.