Devolutions Server <= 2024.3.13 Multiple Vulnerabilities (DEVO-2025-0004)

The version of Devolutions Server installed on the remote host is prior or equal to 2024.3.13 and is, therefore, affected by multiple vulnerabilities: - Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak h...

CVE-2025-2280

Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an authenticated user to bypass the browser extension restriction feature...

CVE-2025-2280

Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an authenticated user to bypass the browser extension restriction feature...

CVE-2025-2280: Improper Access Control

Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an authenticated user to bypass the browser extension restriction feature...

PT-2025-11173

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2024.3.13 and earlier Description: The issue is related to improper access control in the web extension restriction feature, allowing an authenticated user to bypass the browser extension restriction...