CVE-2023-5765

2023-11-0117:12:15

DEVOLUTIONS

www.cve.org

improper access control

password analyzer

bypassing permissions

data source switching

devolutions remote desktop manager

windows

AI Score

9.8

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass permissions via data source switching.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Remote Desktop Manager",
    "vendor": "Devolutions",
    "versions": [
      {
        "lessThanOrEqual": "2023.2.33",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

devolutions.net/security/advisories/DEVO-2023-0019/