CNNVD-202507-3793 Information

CNNVD ID

CNNVD-202507-3793

CVE-2025-8353

  • CNNVD Published: 2025-07-30

Description (Chinese)

Devolutions Server是加拿大Devolutions公司的一个应用系统。提供功能齐全的共享帐户和密码管理解决方案。 Devolutions Server 2025.2.4.0及之前版本存在安全漏洞,该漏洞源于UI同步问题,可能导致未经授权访问已删除的JIT组。

Description (English)

The Defenses Server is an application of the Canadian Defenses Corporation. Provide a fully functional shared account and password management solution. There is a security loophole in Defenses Server 2025.2.4.0 and earlier versions, which stems from UI synchronization problems and may lead to unauthorized access to the deleted JIT team.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Devolutions

Published

2025-07-30

Last Modified

2026-02-24

References

https://devolutions.net/security/advisories/DEVO-2025-0013/ https://access.redhat.com/security/cve/cve-2025-8353

Patch

https://devolutions.net/security/advisories/DEVO-2025-0013/

Share on: