NetSight
medium6.5

CVE-2023-1202

Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with res…

Impact

Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.

Affected products

VendorProductAffected versions
DevolutionsRemote Desktop Manager
before 2023.1.10

Weakness classification

References