Access Control Flaw in Devolutions Server by Devolutions
CVE-2021-23921

9.1CRITICAL

Key Information:

Vendor

Devolutions

Status
Devolutions Server
Vendor
CVE Published:
1 April 2021

What is CVE-2021-23921?

A vulnerability exists in Devolutions Server that allows unauthorized users to access and manipulate password list entry elements. This broken access control flaw can lead to unauthorized data exposure, potentially impacting sensitive information managed within the server. Users and organizations utilizing versions prior to 2020.3 of Devolutions Server are at risk and should take immediate steps to upgrade their installations to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://devolutions.net/security/advisories/devo-2021-0002
x_refsource_CONFIRM

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.