CVE-2023-0951

CVE-2023-0951 affects Devolutions Server 2022.3.12 and earlier, due to improper access controls on certain API endpoints. A standard privileged user could perform privileged actions, with impact described as high for confidentiality, integrity, and availability. The provided documents identify th...

CVE-2023-0953

Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to perform an SQL Injection, potentially resulting in unauthorized access to system resources...

CVE-2023-0953

The CVE concerns Devolutions Server (version 2022.3.12 and earlier). The root cause is insufficient input sanitization in the documentation feature, enabling an authenticated attacker to perform an SQL Injection and potentially access system resources. Impact is described as high (C/H/I/A), with ...

CVE-2023-0953

Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to perform an SQL Injection, potentially resulting in unauthorized access to system resources...

PT-2023-16636 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2022.3.12 and earlier Description: The issue concerns improper access controls on certain API endpoints, potentially allowing a standard privileged user to execute actions that require higher privileges...

PT-2023-16638

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2022.3.12 and earlier Description The issue is related to insufficient input sanitization in the documentation feature, allowing an authenticated attacker to perform an SQL Injection. This could potentially result i...

CVE-2023-0953: Improper Neutralization of Special Elements used in an SQL Command

Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to perform an SQL Injection, potentially resulting in unauthorized access to system resources...

PT-2023-16637 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2022.3.12 and earlier Description: The issue is related to improper access controls on entries in Devolutions Server, which could allow an authenticated user to access sensitive data without proper authorization...

CVE-2023-0951: Undefined Security Weakness

Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could allow a standard privileged user to perform privileged actions...

CVE-2023-0952: Incorrect Authorization

Improper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an authenticated user to access sensitive data without proper authorization...

CVE-2023-0661

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

CVE-2023-0661

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

Improper access control

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server that stems from incorrect access control. An attacker could exploit the vulnerability to obtain...

CVE-2023-0661

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

CVE-2023-0661

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

CVE-2023-0661

CVE-2023-0661 affects Devolutions Server. The vulnerability is an improper access control flaw that allows an authenticated user to access sensitive data they should not be able to view. The root cause is an access-control weakness; the impact is stated as high confidentiality impact with no inte...

PT-2023-16435

Name of the Vulnerable Software and Affected Versions Devolutions Server affected versions not specified Description The issue is related to improper access control, allowing an authenticated user to access sensitive data without proper authorization. Recommendations At the moment, there is no...

CVE-2023-0661: Improper Access Control

Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data...

Default credentials

Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote...