CVE-2025-1231CWE-287

Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after…

Medium · published February 11, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-in due to crash in the password reset functionality.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-02-11T14:05Z
EPSS history
Timeline
  • 11 FEB 14:05Z
    Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after…
    cvelistv5