Devolutions Server Cleartext Storage of Sensitive User Information Vulnerability

A vulnerability exists in Devolutions Server in versions through 2025.3.14 that allows for the exposure of sensitive user account information. This issue arises because the database stores critical data, including security keys and personal credentials, in an unencrypted format. As a result, an attacker with direct access to the database can retrieve this sensitive information.

Impact

Exploitation of this vulnerability leads to the unauthorized access of sensitive user information, including security keys and personal credentials, stored in the database.

Remediation

Users are advised to upgrade to Devolutions Server version 2025.3.15.