CVE-2025-2003CWE-863

Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypass the 'add in root' permission

High · published March 5, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
37.1
In the wild
Unconfirmed
What it is

Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypass the 'add in root' permission.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00442 · 37.1th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-03-05T18:56Z
EPSS history
Timeline
  • 05 MAR 18:56Z
    Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypass the 'add in root' permission
    cvelistv5