CVE-2021-23923: Improper Authentication

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

CVE-2021-23924: Insertion of Sensitive Information into Log File

An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files...

PT-2021-15612

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: A cross-site scripting XSS issue was found in entries of type Document, which could potentially allow malicious scripts to be executed. Recommendations: For versions prior to 2020.3,...

PT-2021-15610

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered that affects the authentication process for Windows domain users, specifically due to broken authentication. Recommendations: For versions prior to 2020.3, updat...

Devolutions Server 日志信息泄露漏洞

Devolutions Server is a local management solution that helps organizations control access to privileged accounts and business user passwords. An information disclosure vulnerability exists in Devolutions Server versions prior to 2020.3, which can be exploited by an attacker to obtain sensitive...

PT-2021-15608

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered in Devolutions Server. There is broken access control on Password List entry elements. Recommendations: For versions prior to 2020.3, update to version 2020.3 or...

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server before 2020.3, which stems from a breach of access control on the password list entry element...