Description
Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypass the 'add in root' permission.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Devolutions | Server | ≤ 2024.3.12.0 | — |
High · 7.1
CVE-2025-2003
EUVD-2025-6156GHSA-qfmj-8v62-hh7x
Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypass the 'add in root' …
Published Mar 5, 2025 · Updated Mar 5, 2025 · Assigned by DEVOLUTIONS