63 results · Clear filters · Feed
-
Medium 6.5
Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2…
-
Medium 6.5
Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and e…
-
Medium 4.3
Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2…
-
Medium 4.3
Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allo…
-
Medium 4.3
Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earli…
-
Medium 4.3
Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earli…
-
Medium 6.5
Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user …
-
Medium 4.3
Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated …
-
Medium 6.8
Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote atta…
-
Medium 6.8
Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote …
-
Medium 5.0
Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an auth…
-
Medium 5.4
Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticate…
-
Medium 6.5
Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authentica…
-
Medium 5.4
Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authentica…
-
Medium 4.3
Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM ed…
-
Medium 4.8
Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutio…
-
Medium 6.5
Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authen…
-
Medium 6.5
Server-Side Request Forgery (SSRF) in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier al…
-
Medium 4.3
Improper access control in the PAM password history endpoints in Devolutions Server allows an authenticated low-privile…
-
Medium 4.3
Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only pe…
-
Medium 6.5
Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Ser…
-
Medium 4.3
Missing authorization in the deleted user groups API in Devolutions Server allows an authenticated low-privileged user …
-
Medium 6.5
Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privile…
-
Medium 5.4
Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an auth…
-
Medium 5.3
Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an au…
-
Medium 5.4
Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authentic…
-
Medium 4.3
Improper access control in the entry activity log feature in Devolutions Server allows an authenticated user with acces…
-
Medium 4.3
Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticate…
-
Medium 4.3
Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory…
-
Medium 5.0
Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated …
-
Medium 4.3
Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privilege…
-
Medium 4.3
Improper access control in the notification management endpoints in Devolutions Server allows an unauthenticated attack…
-
Medium 4.3
Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no ad…
-
Medium 6.5
Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to re…
-
Medium 4.3
Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticat…
-
Medium 5.0
Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authent…
-
Medium 5.0
Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administr…
-
Medium 6.5
Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management priv…
-
Medium 5.4
Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an…
-
Medium 5.9
Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a l…