NetSight
medium4.9

CVE-2023-2445

Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrie…

Impact

Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrieve usage information on folders in user vaults via a specific folder name.

Affected products

VendorProductAffected versions
DevolutionsDevolutions Server
before 2023.1.3.0

Weakness classification

References