CVE-2025-1231: Medium severity devolutions server vulnerability
Published Feb 11, 2025
·Updated
Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-in due to crash in the password reset functionality.
Affected Software
2 affected components
Devolutions Server<2024.3.10.0
Devolutions Devolutions Server<2024.3.11.0
Event History
Feb 11, 2025
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-1231?
CVE-2025-1231 is considered a high-severity vulnerability due to its potential for allowing password reuse.
2
How do I fix CVE-2025-1231?
To fix CVE-2025-1231, upgrade Devolutions Server to version 2024.3.10.1 or later.
3
Who is affected by CVE-2025-1231?
CVE-2025-1231 affects users of Devolutions Server versions up to 2024.3.10.0.
4
What kind of vulnerability is CVE-2025-1231?
CVE-2025-1231 is classified as an improper password reset vulnerability.
5
Can an unauthorized user exploit CVE-2025-1231?
No, CVE-2025-1231 requires authenticated user access to exploit the vulnerability.