Improper access control

2024-03-0522:15:00

PRIOn knowledge base

www.prio-n.com

improper access control

devolutions server

low privileged user

change notifications settings

administrator

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileged user to change notifications settings configured by an administrator.

References

devolutions.net/security/advisories/DEVO-2024-0002