CVE-2025-2278CWE-284

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user…

Medium · published March 13, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00455 · 38.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-03-13T12:56Z
EPSS history
Timeline
  • 13 MAR 12:56Z
    Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user…
    cvelistv5