Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-1202 EUVD-2023-23481GHSA-cwg2-4rcv-xcc4

Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions a…

Published Mar 23, 2023 · Updated Feb 20, 2025 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Remote Desktop Manager

Description

Permission bypass when importing or synchronizing entries in User vault

in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.

Affected products

VendorProductAffectedFixed
Devolutions Remote Desktop Manager ≤ 2023.1.9 —

References