Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-1603 EUVD-2023-23835GHSA-32w5-2rp6-rg25

Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versions allows users wit…

Published Mar 23, 2023 · Updated Feb 25, 2025 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Server

Description

Permission bypass when importing or synchronizing entries in User vault

in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.

Affected products

VendorProductAffectedFixed
Devolutions Server ≤ 2022.3.13 —

References