CVE-2023-1202

2023-03-2317:12:47

DEVOLUTIONS

www.cve.org

devolutions remote desktop manager

cve-2023-1202

user vault

permission bypass

0.001 Low

EPSS

Percentile

21.2%

JSON

Permission bypass when importing or synchronizing entries in User vault

in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Remote Desktop Manager",
    "vendor": "Devolutions",
    "versions": [
      {
        "lessThanOrEqual": "2023.1.9",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

devolutions.net/security/advisories/DEVO-2023-0008

0.001 Low

EPSS

Percentile

21.2%

JSON

Related for CVELIST:CVE-2023-1202