Skip to content
OpenAdvisories
Low · 3.9 CVE-2024-1898 EUVD-2024-17620GHSA-8522-pjcf-fhc2

Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileged user to change no…

Published Mar 5, 2024 · Updated Mar 14, 2025 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Server

Description

Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileged user to change notifications settings configured by an administrator.

Affected products

VendorProductAffectedFixed
Devolutions Server ≤ 2023.3.14.0 —

References