Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.
References
| Link | Resource |
|---|---|
| https://devolutions.net/security/advisories/DEVO-2025-0017/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
18 Dec 2025, 21:18
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:* cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:* |
|
| References | () https://devolutions.net/security/advisories/DEVO-2025-0017/ - Vendor Advisory | |
| First Time |
Devolutions
Devolutions devolutions Server Devolutions remote Desktop Manager |
28 Nov 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
28 Nov 2025, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-28 17:16
Updated : 2025-12-18 21:18
NVD link : CVE-2025-13683
Mitre link : CVE-2025-13683
CVE.ORG link : CVE-2025-13683
JSON object : View
Products Affected
devolutions
- devolutions_server
- remote_desktop_manager
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor