Privilege Context Switching Flaw in Devolutions Server

CVE-2025-3517

What is CVE-2025-3517?

A vulnerability in the PAM JIT feature of Devolutions Server prior to version 2025.1.5.0 enables the improper reset of a PAM JIT account password following specific user actions, such as editing the username. This flaw may allow unauthorized access and alter the intended security protocols, posing significant security concerns for affected installations.

References