Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-2118 EUVD-2023-33639GHSA-xw8j-xwwr-8vqj

Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send s…

Published Apr 21, 2023 · Updated Feb 4, 2025 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Devolutions Server

Description

Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints.

Affected products

VendorProductAffectedFixed
Devolutions Devolutions Server < 2023.1.6.0 2023.1.6.0

References