CVE-2025-13683

Medium CVSS: 6.5

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.

Vendor

Devolutions

Product

Devolutions Server

CWE

CWE-200

Yayın Tarihi

2025-11-28 17:16:08

Güncelleme

2025-12-18 21:18:26

Source Identifier

security@devolutions.net

KEV Date Added

Kategoriler

CWE-200 Devolutions Server MEDIUM Devolutions 2025

Referanslar

https://devolutions.net/security/advisories/DEVO-2025-0017/

Benzer Kayıtlar

Medium

CVE-2026-5175

Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenti…

High

CVE-2026-4828

Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote att…

Medium

CVE-2026-4829

Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an…

High

CVE-2026-4924

Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier all…

Medium

CVE-2026-4925

Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administra…

Medium

CVE-2026-4927

Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privi…