Lucene search

K
vulnrichmentDEVOLUTIONSVULNRICHMENT:CVE-2023-5358
HistoryNov 01, 2023 - 5:17 p.m.

CVE-2023-5358

2023-11-0117:17:31
DEVOLUTIONS
github.com
1
improper access control
report log filters
devolutions server
attackers
vaults
report request url

AI Score

7.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and earlier allows attackers to retrieve logs from vaults or entries they are not allowed to access via the report request url query parameters.

AI Score

7.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-5358