CVE-2025-5382 Information

Description

Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user management permission to remove or change administrators MFA.

Reference

https://devolutions.net/security/advisories/DEVO-2025-0011/