Home

Description

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.

PUBLISHED Reserved 2025-11-25 | Published 2025-11-28 | Updated 2025-11-28 | Assigner DEVOLUTIONS

Problem types

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Product status

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

References

devolutions.net/security/advisories/DEVO-2025-0017/

cve.org (CVE-2025-13683)

nvd.nist.gov (CVE-2025-13683)

Download JSON