Unrated severityNVD Advisory· Published Nov 6, 2025· Updated Nov 7, 2025
CVE-2025-12808
CVE-2025-12808
Description
Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as password lists custom values, resulting in password disclosure.
This issue affects the following versions :
* Devolutions Server 2025.3.2.0 through 2025.3.5.0 *
Devolutions Server 2025.2.15.0 and earlier
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: >=2025.2.15.0 and earlier OR >=2025.3.2.0 through <=2025.3.5.0
- Devolutions/Serverv5Range: 2025.3.2.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.