| Package | Affected versions | Patched versions |
|---|---|---|
| devolutions server | ≥ 2025.2.2.0, < 2025.2.4.0≤ 2025.1.11.0 | 2025.2.4.0 |
Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authentication via brute forcing the short emergency codes generated by the server within a feasible timeframe. This issue affects the following versions : * Devolutions Server 2025.2.2.0 through 2025.2.3.0 * Devolutions Server 2025.1.11.0 and earlier
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free