CVE-2023-1603

CVSS 6.5 MEDIUMEPSS 0.6%CWE-863

Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Devolutions · Server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://devolutions.net/security/advisories/DEVO-2023-0008