CVE-2025-1231 - AskarLabs CVE Database

CVE-2025-1231

Vendor Devolutions

Product Server

Weakness CWE-287 · Improper authentication

Published February 11, 2025

Last update February 11, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reuse the oracle user password after check-in due to crash in the password reset functionality.

Key dates

02Disclosure timeline

February 11, 2025 CVE published

February 11, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-1231 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2022-46170 CodeIgniter is vulnerable to improper authentication via Session Handlers CVE-2021-32637 Authentication bypassed with malformed request URI CVE-2026-34389 Fleet's user account creation via invite does not enforce invited email address CVE-2023-42818 SSH public key login without private key challenge if mfa is enabled in jumpserver CVE-2018-7532