1090 matches found
PT-2023-16636 · Devolutions · Devolutions Server
Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2022.3.12 and earlier Description: The issue concerns improper access controls on certain API endpoints, potentially allowing a standard privileged user to execute actions that require higher privileges...
CVE-2023-0951: Undefined Security Weakness
Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could allow a standard privileged user to perform privileged actions...
CVE-2023-0661
Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...
CVE-2023-0661
Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...
Improper access control
Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...
Devolutions Server 安全漏洞
Devolutions Server is an application from Devolutions Canada. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server that stems from incorrect access control. An attacker could exploit the vulnerability to obtain...
CVE-2023-0661
Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...
CVE-2023-0661
Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...
CVE-2023-0661
CVE-2023-0661 affects Devolutions Server. The vulnerability is an improper access control flaw that allows an authenticated user to access sensitive data they should not be able to view. The root cause is an access-control weakness; the impact is stated as high confidentiality impact with no inte...
CVE-2023-0661: Improper Access Control
Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...
PT-2023-16435
Name of the Vulnerable Software and Affected Versions Devolutions Server affected versions not specified Description The issue is related to improper access control, allowing an authenticated user to access sensitive data without proper authorization. Recommendations At the moment, there is no...
Default credentials
Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote...
CVE-2022-3781
Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote...
CVE-2022-3781
Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote...
PT-2022-24088 · Devolutions +1 · Devolutions Remote Desktop Manager +2
Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2022.2.26 and prior Devolutions Server versions 2022.3.1 and prior Description: The issue concerns the lack of encryption for Dashlane password and Keepass Server password in My Account Settings,...
CVE-2022-3781: Missing Encryption of Sensitive Data
Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote...
CVE-2022-33996
Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user...
CVE-2022-33996
Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user...