CVE-2024-1898

2024-03-0522:15:47

[email protected]

web.nvd.nist.gov

improper access control

notification feature

low privileged user

administrator settings

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileged user to change notifications settings configured by an administrator.

References

devolutions.net/security/advisories/DEVO-2024-0002