| Package | Affected versions | Patched versions |
|---|---|---|
| devolutions server | ≥ 2025.3.2.0, < 2025.3.6.0< 2025.2.17.0 | 2025.3.6.02025.2.17.0 |
Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as password lists custom values, resulting in password disclosure. This issue affects the following versions : * Devolutions Server 2025.3.2.0 through 2025.3.5.0 * Devolutions Server 2025.2.15.0 and earlier
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free