CVE-2023-2445

Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to…

Medium · published May 2, 2023

CVSS v3.1
4.9
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrieve usage information on folders in user vaults via a specific folder name.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00979 · 61.8th percentile
Published
2023-05-02T13:11Z
EPSS history
Timeline
  • 02 MAY 13:11Z
    Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to…
    cvelistv5