CVE-2025-13683

Published: Nov 28, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.

Affected (2)

Products: Devolutions: Devolutions Server, Remote Desktop Manager

Devolutions

2 products

Devolutions Server

Remote Desktop Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Devolutions Devolutions Server	Before 2025.3.10.0
Devolutions Remote Desktop Manager	Before 2025.3.25.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://devolutions.net/security/advisories/DEVO-2025-0017/

Source: security@devolutions.net

Vendor Advisory

Timeline

No history available yet.