CVE-2025-2277

3/13/2025 1:15:58 PM
دیروز
دیروز
1
Reporter :security@devolutions.net
Modified :3/13/2025 1:15:58 PM
Problem Data :CWE-200

Description

Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing password masking.

EPSS

Epss Score 0
Epss Percentile 0

Note: Consider this fact that the EPSS model relies on historical data and real-world exploit information to calculate the probability of exploitation. When a CVE is newly published, there isn't enough data available to determine its likelihood of being exploited. As a result, the EPSS score defaults to 0 until more information becomes available.

Reference