What the vulnerability does

01Description

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID.

Key dates

02Disclosure timeline

March 13, 2025 CVE published
March 18, 2025 Record updated