Threats tagged 'ghsa-qj6m-vqpr-wffx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.8	CVE-2025-12485Improper privilege management during pre-MFA cookie handling in Devolutions Server 2025.3.5.0 and earlier allows a High8.82025-11-06GCVE DatabaseCVE-2025-12485 Devolutions Server versions 2025.3.5.0 and earlier have an improper privilege management vulnerability during pre-MFA cookie handling. This flaw allows a low-privileged authenticated user to impersonate another account by replaying the pre-MFA cookie. The vulnerability does not bypass the target account's MFA verification step. Report on CVE-2025-12485 Vulnerability CWE-269 #ghsa-qj6m-vqpr-wffx	GCVE Database	2025-11-06

Page 1 of 1