Lucene search
+L

1561 matches found

Cvelist
Cvelist
•added 2023/08/21 6:38 p.m.•44 views

CVE-2023-4417

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in th...

6.7AI score0.00541EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/21 6:38 p.m.•70 views

CVE-2023-4417

The CVE-2023-4417 issue affects Devolutions Remote Desktop Manager for Windows up to 2023.2.19, caused by improper access controls in the entry duplication component. An authenticated user can, under certain conditions, share a personal vault entry with shared vaults via an incorrect vault during...

6.5CVSS6.4AI score0.00541EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/21 6:36 p.m.•20 views

CVE-2023-4373

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature...

9.6AI score0.00718EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/08/21 6:36 p.m.•52 views

CVE-2023-4373

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature...

9.7AI score0.00718EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/21 6:36 p.m.•159 views

CVE-2023-4373

CVE-2023-4373 concerns Devolutions Remote Desktop Manager (versions ≤ 2023.2.19). The issue is inadequate validation of permissions when using remote tools and macros, allowing a user to initiate a connection without proper execution rights via the remote tools feature. Affected software: Devolut...

9.8CVSS9.4AI score0.00718EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/08/21 12:00 a.m.•16 views

Devolutions Remote Desktop Manager 安全漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2023.2.19 and prior versions that stems from incorrect access control...

6.5CVSS6.5AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/21 12:00 a.m.•3 views

CVE-2023-4373: Improper Authentication

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature...

9.8CVSS8.3AI score0.00718EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/08/21 12:00 a.m.•15 views

Devolutions Remote Desktop Manager 授权问题漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2023.2.19 and prior versions that stems from insufficient privilege validation. An...

9.8CVSS8.5AI score0.00718EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/21 12:00 a.m.•6 views

CVE-2023-4417: Undefined Security Weakness

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in th...

6.5CVSS6.6AI score0.00541EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/08/21 12:00 a.m.•14 views

PT-2023-29140 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2023.2.19 and earlier Description: The issue is related to improper access controls in the entry duplication component, allowing an authenticated user, under specific circumstances, to inadvertently...

6.5CVSS6.3AI score0.00541EPSS
SaveExploits0References5
NVD
NVD
•added 2023/06/20 5:15 p.m.•32 views

CVE-2023-2400

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...

2.7CVSS3.7AI score0.00442EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/20 5:15 p.m.•18 views

CVE-2023-2400

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...

2.7CVSS5.8AI score0.00442EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/20 5:15 p.m.•31 views

Design/Logic Flaw

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...

3.3CVSS4AI score0.00442EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/06/20 4:19 p.m.•21 views

CVE-2023-2400

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...

6.8AI score0.00442EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/20 4:19 p.m.•66 views

CVE-2023-2400

Summary: CVE-2023-2400 affects Devolutions Server 2023.1.8 and earlier. The vulnerability stems from an improper deletion of resources in the user management feature, which allows an administrator to view the vaults of deleted users via database access. Affected software/area: Devolutions Server,...

2.7CVSS4AI score0.00442EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/06/20 12:00 a.m.•15 views

PT-2023-19349 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2023.1.8 and earlier Description: The issue is related to the improper deletion of resources in the user management feature, allowing an administrator to view users' vaults of deleted users via database access...

2.7CVSS6.8AI score0.00442EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/20 12:00 a.m.•3 views

CVE-2023-2400: Incomplete Cleanup

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...

2.7CVSS5.5AI score0.00442EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/06/20 12:00 a.m.•12 views

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada. provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2023.1.8 and prior versions, which stems from improper resource deletion in the user management...

2.7CVSS4.9AI score0.00442EPSS
SaveExploits0References2
NVD
NVD
•added 2023/05/02 2:15 p.m.•44 views

CVE-2023-2445

Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrieve usage information on folders in user vaults via a specific folder name...

4.9CVSS5AI score0.00979EPSS
SaveExploits0References1
OSV
OSV
•added 2023/05/02 2:15 p.m.•17 views

CVE-2023-2445

Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrieve usage information on folders in user vaults via a specific folder name...

4.9CVSS5.8AI score0.00979EPSS
SaveExploits0References1
Rows per page
Query Builder