CVEvulnerability

CVE-2025-0691

5.0 MEDIUM Published 2025-06-05 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-06-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.0 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Weaknesses
CWE-284

Description

Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" permission by bypassing the client side validation.

Affected configurations

• devolutions devolutions server (<= 2025.1.10.0)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References