CVE-2025-4433
Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrative user with both "User Management" and "User Group Manage…
Published: 2025-05-30 · CVSS: 8.7 · CVSS 4.0
Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrative user with both "User Management" and "User Group Management" permissions to perform privilege escalation by adding users to groups with administrative privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7