Security & compliance

Upholding the highest standards to protect your data and ensure trust.

DEVO-2025-0002

Devolutions Server is affected by a vulnerability

Affected Products

Devolutions Server
2024.3.10.0 and earlier

Change Log

11/02/2025 - Initial publication

2.3 Low - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Improper password reset in PAM Module - Oracle users

Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-in due to crash in the password reset functionality

Affected Products

CVE(s)

CVE-2025-1231

Remediation and Workarounds

Upgrade to Devolutions Server 2024.3.11.0 or higher

Devolutions Logo

Helping organizations control the IT chaos by providing highly-secure password, remote connection and privileged access management solutions.

DEVOLUTIONS

Legal & privacy | infos@devolutions.net

All rights reserved © 2025 Devolutions