Improper Access Control in Devolutions Server by Devolutions

CVE-2023-0951

What is CVE-2023-0951?

The vulnerability involves improper access control on specific API endpoints in Devolutions Server versions up to 2022.3.12. This can allow standard privileged users to execute actions that should be restricted, potentially leading to unauthorized access and manipulation of sensitive data or system functions. It's crucial for organizations using affected versions to evaluate their security posture and apply necessary mitigations.

References