CVE-2023-0661

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

Improper access control

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server that stems from incorrect access control. An attacker could exploit the vulnerability to obtain...

CVE-2023-0661

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

CVE-2023-0661

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

CVE-2023-0661

CVE-2023-0661 affects Devolutions Server. The vulnerability is an improper access control flaw that allows an authenticated user to access sensitive data they should not be able to view. The root cause is an access-control weakness; the impact is stated as high confidentiality impact with no inte...

CVE-2023-0661: Improper Access Control

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

PT-2023-16435

Name of the Vulnerable Software and Affected Versions Devolutions Server affected versions not specified Description The issue is related to improper access control, allowing an authenticated user to access sensitive data without proper authorization. Recommendations At the moment, there is no...

Code injection

The force offline MFA prompt setting is not respected when switching to offline mode in Devolutions Remote Desktop Manager 2022.3.29 to 2022.3.30 allows a user to save sensitive data on disk...

Devolutions Remote Desktop Manager 安全漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager versions 2022.3.29 to 2022.3.30, which stems from when it switches to offline mode, the forced...

CVE-2023-0463

Devolutions Remote Desktop Manager versions 2022.3.29 through 2022.3.30 are vulnerable to a flaw where the force offline MFA prompt setting is ignored when the application switches to offline mode. This allows a user to save sensitive data on disk . As a mitigation, it is recommended to disable t...

CVE-2023-0463

The force offline MFA prompt setting is not respected when switching to offline mode in Devolutions Remote Desktop Manager 2022.3.29 to 2022.3.30 allows a user to save sensitive data on disk...

CVE-2023-0463

The force offline MFA prompt setting is not respected when switching to offline mode in Devolutions Remote Desktop Manager 2022.3.29 to 2022.3.30 allows a user to save sensitive data on disk...

CVE-2023-0463: Missing Authentication for Critical Function

The force offline MFA prompt setting is not respected when switching to offline mode in Devolutions Remote Desktop Manager 2022.3.29 to 2022.3.30 allows a user to save sensitive data on disk...

PT-2023-16287 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2022.3.29 through 2022.3.30 Description: The issue arises when the force offline MFA prompt setting is not respected in offline mode, allowing users to save sensitive data on disk. Recommendations:...

CVE-2022-26964

Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded...

CVE-2022-26964

Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded...

PT-2022-18144 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions prior to 2022.1 Description: The issue allows information disclosure via a password brute-force attack due to weak password derivation for export. An error caused base64 to be decoded, potentially...

CVE-2022-26964: Improper Restriction of Excessive Authentication Attempts

Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded...

CVE-2022-26964

The CVE-2022-26964 entry concerns Devolutions Remote Desktop Manager prior to version 2022.1, where weak password derivation for export enables information disclosure via a password brute-force attack. The underlying issue is an error that causes base64 to be decoded, contributing to the weakness...