Improper access control

2023-03-1021:15:00

PRIOn knowledge base

www.prio-n.com

improper access control

devolutions server

authenticated attacker

secure messages

data access

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

JSON

Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.

CPENameOperatorVersion
devolutions_serverlt2022.3.13

CPE	Name	Operator	Version
	devolutions_server	lt	2022.3.13

References

devolutions.net/security/advisories/DEVO-2023-0005