CVE-2025-2278

Publication date

2025-03-13 12:56:04

Family

DEVOLUTIONS

State

PUBLISHED

Description

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID.