CVE-2025-2280

概要

参考情報

• devolutions.net/security/advisories/DEVO-2025-0004 · Vendor Advisory

devolutions server のその他の脆弱性

• CVE-2026-110806中 6.5Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permis…
• CVE-2026-110805低 2.6Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged u…
• CVE-2026-110804中 4.3Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenti…
• CVE-2026-110287中 4.3Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edi…
• CVE-2026-17570中 4.3Improper access control in the PAM password history endpoints in Devolutions Server allows an authenticated low-privileged user to disclose …