← Database

CVE-2025-2003

HIGH CVSS: 7.1 Published: 2025-03-05 Modified: 2026-06-17

Description

Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypass the 'add in root' permission.

Affected Platforms

Devolutions Devolutions Server

Weakness Type

CWE-863, CWE-863

References