CVE-2025-8312
7.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
Summary
Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its intended check-out period due to a deadlock occurring in the scheduling service.This issue affects the following version(s) :
Devolutions Server 2025.2.2.0 through 2025.2.5.0
- Devolutions Server 2025.1.12.0 and earlier
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Devolutions | Server | 2025.2.2.0 <= 2025.2.5.0 | affected |
| Devolutions | Server | 0 <= 2025.1.13.0 | affected |
Weaknesses
- CWE-833: CWE-833: Deadlock
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.