Access Control Flaw in Devolutions Server by Devolutions
CVE-2021-23921

9.1CRITICAL

Key Information:

Vendor

Devolutions

Status
Devolutions Server
Vendor
CVE Published:
1 April 2021

What is CVE-2021-23921?

A vulnerability exists in Devolutions Server that allows unauthorized users to access and manipulate password list entry elements. This broken access control flaw can lead to unauthorized data exposure, potentially impacting sensitive information managed within the server. Users and organizations utilizing versions prior to 2020.3 of Devolutions Server are at risk and should take immediate steps to upgrade their installations to mitigate this vulnerability.

References

https://devolutions.net/security/advisories/devo-2021-0002
x_refsource_CONFIRM

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.