Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-12196 EUVD-2024-50669GHSA-fr2r-2pc4-h4f4

Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the p…

Published Dec 4, 2024 · Updated Dec 4, 2024 · Assigned by DEVOLUTIONS

Description

Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password history of an entry without the view password permission.

Affected products

VendorProductAffectedFixed
Devolutions Server ≤ 2024.3.7.0 —

References