Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-1231 EUVD-2025-2094GHSA-mjmw-3m65-4c84

Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user p…

Published Feb 11, 2025 · Updated Feb 11, 2025 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Server

Description

Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-in due to crash in the password reset functionality.

Affected products

VendorProductAffectedFixed
Devolutions Server ≤ 2024.3.10.0 —

References