Unscored CVE-2023-1201 EUVD-2023-23480GHSA-8gv8-h38v-5j5v

Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that poss…

Published Mar 6, 2023 · Updated Mar 6, 2025 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Devolutions Server

Description

Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.

Affected products

Vendor	Product	Affected	Fixed
Devolutions	Devolutions Server	≤ 2022.3.12	—

References

https://devolutions.net/security/advisories/DEVO-2023-0005