CVE-2025-6741 — Devolutions / Server

CVE-2025-6741

Devolutions / Server PUBLISHED

Description (CNA)

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : * Devolutions Server 2025.2.2.0 through 2025.2.4.0 * Devolutions Server 2025.1.11.0 and earlier

Affected (CNA)

Vendor / product	Versions
Devolutions / Server	affected 0 through 2025.1.11.0; affected 2025.2.2.0 through 2025.2.4.0

CWE

CWE-284

References

https://devolutions.net/security/advisories/DEVO-2025-0012/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.