Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.
References
| Link | Resource |
|---|---|
| https://devolutions.net/security/advisories/DEVO-2023-0005 | Vendor Advisory |
| https://devolutions.net/security/advisories/DEVO-2023-0005 | Vendor Advisory |
Configurations
History
21 Nov 2024, 07:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://devolutions.net/security/advisories/DEVO-2023-0005 - Vendor Advisory |
07 Nov 2023, 04:02
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains. |
Information
Published : 2023-03-10 21:15
Updated : 2024-11-21 07:38
NVD link : CVE-2023-1201
Mitre link : CVE-2023-1201
CVE.ORG link : CVE-2023-1201
JSON object : View
Products Affected
devolutions
- devolutions_server
CWE