Portail
Forum
Devolutions Force
Hub Business
Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Sécurité et conformité
DEVO-2025-0002
Résumé
Devolutions Server is affected by a vulnerability
Produits affectés
Devolutions Server 2024.3.10.0 and earlier
Journal des modifications
11/02/2025 - Initial publication
Sévérité
Low
Produit
Devolutions Server
Version corrigée
2024.3.11.0
Improper password reset in PAM Module - Oracle users
Description
Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-in due to crash in the password reset functionality
Mesures correctives et solutions de contournement
Upgrade to Devolutions Server 2024.3.11.0 or higher
Sévérité
2.3 Low - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Produits affectés
Devolutions Server 2024.3.10.0 and earlier
CVE(s)
CVE-2025-1231
