CVE-2021-23924

Summary: Devolutions Server prior to 2020.3 contains an information-disclosure vulnerability where diagnostic files expose sensitive data. Affected product: Devolutions Server (versions before 2020.3). Vulnerability: Exposure of sensitive information in diagnostic files. Root cause stated as info...

CVE-2021-23924

An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files...

CVE-2021-23921

CVE-2021-23921 affects Devolutions Server prior to 2020.3. The issue is broken access control on Password List entry elements, as described in the CVE entry and corroborated by NVD/related records. The connected documents confirm the affected software and the underlying flaw (inadequate access re...

CVE-2021-23921

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements...

CVE-2021-23923

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

CVE-2021-23923

The CVE concerns Devolutions Server prior to 2020.3 with a Broken Authentication issue involving Windows domain users. Public documents identify affected software and the vulnerability type but do not provide exploit details, exact root cause, or remediation steps within the supplied sources. Mon...

Devolutions Server cross-site scripting vulnerabilities

Devolutions Server is a local management solution that helps organizations control access to privileged accounts and business user passwords. A cross-site scripting vulnerability exists in Devolutions Server versions prior to 2020.3 in entries of type "Document", which can be exploited by an...

CVE-2021-23925: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting XSS vulnerability in entries of type Document...

Devolutions Server Authorization Issue Vulnerability

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. An authorization issue vulnerability exists in Devolutions Server versions prior to 2020.3 that stems from an authentication outage for Windows domain users. ...

Devolutions Server security vulnerabilities

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server before 2020.3, which stems from a breach of access control on the password list entry element...

CVE-2021-23923: Improper Authentication

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

CVE-2021-23921: Undefined Security Weakness

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements...

CVE-2021-23924: Insertion of Sensitive Information into Log File

An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files...

PT-2021-15611

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered that exposes sensitive information in diagnostic files. Recommendations: For versions prior to 2020.3, update to version 2020.3 or later to resolve the issue...

PT-2021-15610

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered that affects the authentication process for Windows domain users, specifically due to broken authentication. Recommendations: For versions prior to 2020.3, updat...

PT-2021-15612

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: A cross-site scripting XSS issue was found in entries of type Document, which could potentially allow malicious scripts to be executed. Recommendations: For versions prior to 2020.3,...

PT-2021-15608

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered in Devolutions Server. There is broken access control on Password List entry elements. Recommendations: For versions prior to 2020.3, update to version 2020.3 or...

Devolutions Server log information leakage vulnerability

Devolutions Server is a local management solution that helps organizations control access to privileged accounts and business user passwords. An information disclosure vulnerability exists in Devolutions Server versions prior to 2020.3, which can be exploited by an attacker to obtain sensitive...