Skip to content
OpenAdvisories
Unscored CVE-2023-5575 EUVD-2023-57871GHSA-rv9v-x78f-m73w

Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a l…

Published Oct 16, 2023 · Updated Sep 16, 2024 · Assigned by DEVOLUTIONS

Description

Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a low privileged user to access entries via a specific combination of permissions in the entry and in its parent.

Affected products

VendorProductAffectedFixed
Devolutions Server ≤ 2022.3.13.0 —

References