Description
Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permission.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Devolutions | DVLS (Devolutions Server) | ≤ 2024.3.6 | — |