Описание
Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authentication via brute forcing the short emergency codes generated by the server within a feasible timeframe.
This issue affects the following versions :
- Devolutions Server 2025.2.2.0 through 2025.2.3.0
Devolutions Server 2025.1.11.0 and earlier
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
7.7 High
CVSS3
Дефекты
Связанные уязвимости
Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authentication via brute forcing the short emergency codes generated by the server within a feasible timeframe. This issue affects the following versions : * Devolutions Server 2025.2.2.0 through 2025.2.3.0 * Devolutions Server 2025.1.11.0 and earlier
EPSS
7.7 High
CVSS3