CVE-2025-13765

Medium CVSS: 4.3

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Vendor

Devolutions

Product

Devolutions Server

CWE

CWE-200

Yayın Tarihi

2025-11-27 16:15:47

Güncelleme

2025-12-03 14:47:18

Source Identifier

security@devolutions.net

KEV Date Added

Kategoriler

CWE-200 Devolutions Server MEDIUM Devolutions 2025

Referanslar

https://devolutions.net/security/advisories/DEVO-2025-0018/

Benzer Kayıtlar

Medium

CVE-2026-5175

Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenti…

High

CVE-2026-4828

Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote att…

Medium

CVE-2026-4829

Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an…

High

CVE-2026-4924

Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier all…

Medium

CVE-2026-4925

Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administra…

Medium

CVE-2026-4927

Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privi…