Description

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements.

Related CPE's

a

devolutions

devolutions_server

Vulnerable

References

https://devolutions.net/security/advisories/devo-2021-0002

Vendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-Other

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.1 · Critical

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-04-01T22:15:12.247

4 years ago

Last modified

2021-04-06T16:43:49.157

4 years ago