Portail
Forum
Devolutions Force
Hub Business
Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Sécurité et conformité
DEVO-2025-0003
Résumé
Devolutions Server is affected by a vulnerability.
Produits affectés
Devolutions Server 2024.3.12 and earlier
Journal des modifications
5/3/2025 - Initial publication
Sévérité
Medium
Produit
Devolutions Server
Version corrigée
2024.3.13
Incorrect authorization in PAM vaults
Description
Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypass the 'add in root' permission.
Sévérité
Medium 6.0 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
Produits affectés
Devolutions Server 2024.3.12 and earlier
CVE(s)
CVE-2025-2003
