Improper access control

2023-11-0118:15:00

PRIOn knowledge base

www.prio-n.com

improper access control

password analyzer

devolutions

windows

data source switching

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass permissions via data source switching.

CPENameOperatorVersion
remote_desktop_managerle2023.2.33

CPE	Name	Operator	Version
	remote_desktop_manager	le	2023.2.33

References

devolutions.net/security/advisories/DEVO-2023-0019/