Authentication flaw

2023-04-0221:15:00

PRIOn knowledge base

www.prio-n.com

authentication

permission bypass

user vault

devolutions server

entry synchronization

restricted rights

id collision

nvd

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.

CPENameOperatorVersion
devolutions_serverlt2023.1.3.0

CPE	Name	Operator	Version
	devolutions_server	lt	2023.1.3.0

References

devolutions.net/security/advisories/DEVO-2023-0008