Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

Devolutions Server Flaw Allows Attackers to Impersonate Users via Pre-MFA Cookie

Devolutions Server has been found vulnerable to a critical security flaw that allows low-privileged authenticated users to impersonate other accounts by replaying pre-MFA cookies. The vulnerability, identified as CVE-2025-12485, carries a critical CVSS…

LBy Lucas NorwoodNov 11, 20252 min read

Devolutions Server has been found vulnerable to a critical security flaw that allows low-privileged authenticated users to impersonate other accounts by replaying pre-MFA cookies. The vulnerability, identified as CVE-2025-12485, carries a critical CVSS score of 9.4 and affects all versions up to 2025.3.5.The company has released patches to address this and a second vulnerability affecting the platform.CVE IDSeverityCVSS ScoreVulnerabilityCVE-2025-12485Critical9.4Improper privilege management during pre-MFA cookie handling – allows authenticated users to impersonate other accounts via cookie replayThe flaw exists in how Devolutions Server handles pre-MFA cookies during the authentication process.An attacker with low-level access can intercept and replay a pre-MFA cookie from a legitimate user to impersonate their account.However, the vulnerability does not completely bypass the target account’s multi-factor authentication, meaning attackers would still need to complete MFA to gain full access.Despite this limitation, the ability to impersonate users and reach the MFA stage represents a serious security risk for organizations using Devolutions Server for credential and access management.The impersonation vulnerability is classified as an improper privilege management issue. It demonstrates a fundamental flaw in the authentication system’s validation of user identity during the pre-MFA phase.This type of vulnerability is particularly concerning for businesses that rely on Devolutions Server to manage privileged access across their infrastructure, as it could allow attackers to move laterally within systems or escalate their privileges.A second vulnerability, CVE-2025-12808, with a High CVSS score of 7.1, has also been disclosed. This flaw involves improper access control that allows view-only users to access sensitive third-level nested fields.Specifically, users with limited view-only permissions can retrieve password lists and custom values from sensitive fields, thereby disclosing passwords.This vulnerability undermines the role-based access control system, allowing lower-privileged users to access information they should not be able to see.Devolutions has addressed both vulnerabilities with security updates. Organizations using Devolutions Server should immediately upgrade to version 2025.3.6.0 or higher, or, if running an older release branch, to version 2025.2.17.0 or higher.The company lished the initial security advisory on November 6, 2025, providing organizations with details on the vulnerability and remediation paths.The simultaneous disclosure of these two vulnerabilities highlights the importance of maintaining up-to-date access control systems and regularly auditing authentication mechanisms.Organizations managing privileged accounts through Devolutions Server should prioritize applying these patches to prevent potential unauthorized access and account impersonation attacks.Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Based on reporting by GBHackers.

Advertisement
AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026