CVE-2025-0691 - AskarLabs CVE Database

CVE-2025-0691

Vendor Devolutions

Product Server

Weakness CWE-284

Published June 5, 2025

Last update June 5, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated user to bypass the "Edit permission" permission by bypassing the client side validation.

Key dates

02Disclosure timeline

June 5, 2025 CVE published

June 5, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-0691 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html

Related vulnerabilities

04Related CVE

CVE-2024-46990 SSRF Loopback IP filter bypass in directus CVE-2019-6520 CVE-2025-5422 juzaweb CMS Email Logs Page email access control CVE-2021-36036 Magento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution CVE-2025-3113 Improper Access Control in Delphix Masking Engine