Authentication flaw

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

Information disclosure

An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files...

Improper access control

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements...

CVE-2021-23925

An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting XSS vulnerability in entries of type Document...

CVE-2021-23923

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

Cross site scripting

An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting XSS vulnerability in entries of type Document...

CVE-2021-23921

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements...

CVE-2021-23924

An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files...

CVE-2021-23925

Devolutions Server (prior to version 2020.3) contains a cross-site scripting (XSS) vulnerability in Document entries. The issue affects the Document-type data handling and allows injecting JavaScript code, as described across multiple CVE references (CVE-2021-23925) with CVSS v3.1 base score 6.1 ...

CVE-2021-23924

Summary: Devolutions Server prior to 2020.3 contains an information-disclosure vulnerability where diagnostic files expose sensitive data. Affected product: Devolutions Server (versions before 2020.3). Vulnerability: Exposure of sensitive information in diagnostic files. Root cause stated as info...

CVE-2021-23924

An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files...

CVE-2021-23921

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements...

CVE-2021-23921

CVE-2021-23921 affects Devolutions Server prior to 2020.3. The issue is broken access control on Password List entry elements, as described in the CVE entry and corroborated by NVD/related records. The connected documents confirm the affected software and the underlying flaw (inadequate access re...

CVE-2021-23923

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

CVE-2021-23923

The CVE concerns Devolutions Server prior to 2020.3 with a Broken Authentication issue involving Windows domain users. Public documents identify affected software and the vulnerability type but do not provide exploit details, exact root cause, or remediation steps within the supplied sources. Mon...

CVE-2021-23921: Undefined Security Weakness

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements...

CVE-2021-23925: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting XSS vulnerability in entries of type Document...

PT-2021-15611

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered that exposes sensitive information in diagnostic files. Recommendations: For versions prior to 2020.3, update to version 2020.3 or later to resolve the issue...

Devolutions Server 跨站脚本漏洞

Devolutions Server is a local management solution that helps organizations control access to privileged accounts and business user passwords. A cross-site scripting vulnerability exists in Devolutions Server versions prior to 2020.3 in entries of type "Document", which can be exploited by an...

Devolutions Server 授权问题漏洞

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. An authorization issue vulnerability exists in Devolutions Server versions prior to 2020.3 that stems from an authentication outage for Windows domain users. ...