Home

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

PUBLISHED Reserved 2025-11-26 | Published 2025-11-27 | Updated 2025-12-01 | Assigner DEVOLUTIONS

Problem types

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Product status

Default status
unaffected

Any version
affected

Any version
affected

References

devolutions.net/security/advisories/DEVO-2025-0018/

cve.org (CVE-2025-13758)

nvd.nist.gov (CVE-2025-13758)

Download JSON