Sensitive
user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which allows an attacker with
access to the database to obtain sensitive user
information via direct database access.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
CWE-312: Cleartext Storage of Sensitive Information - The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
> HISTORIQUE DES MODIFICATIONS
Première apparition
25/02/2026 19:43
Source: NVD
📊
ENRICHISSEMENT
01/03/2026 06:46
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-312: Cleartext Storage of Sensitive Information - The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Total des modifications: 1
Dernière mise à jour: 8 months ago