CVE-2025-12808: Medium severity Devolutions Server vulnerability
Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as password lists custom values, resulting in password disclosure.
This issue affects the following versions :
Devolutions Server 2025.3.2.0 through 2025.3.5.0
Devolutions Server 2025.2.15.0 and earlier
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12808?
CVE-2025-12808 has a high severity rating due to the risk of sensitive password disclosure.
How do I fix CVE-2025-12808?
To fix CVE-2025-12808, update Devolutions Server to version 2025.3.5.1 or later.
What are the impacts of CVE-2025-12808?
The impact of CVE-2025-12808 includes unauthorized access to sensitive password lists and potential data breaches.
Who is affected by CVE-2025-12808?
CVE-2025-12808 affects all users of Devolutions Server versions 2025.3.5.0 and earlier.
What can exploited CVE-2025-12808 lead to?
Exploiting CVE-2025-12808 can lead to significant security risks through the disclosure of sensitive passwords.