CVE-2023-2118

Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and…

Medium · published April 21, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00365 · 29.1th percentile
Published
2023-04-21T21:52Z
EPSS history
Timeline
  • 21 APR 21:52Z
    Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and…
    cvelistv5