Improper Access Control in Devolutions Remote Desktop Manager for Windows
CVE-2023-4417

6.5MEDIUM

Key Information:

Vendor

Devolutions

Status
Remote Desktop Manager
Vendor
CVE Published:
21 August 2023

What is CVE-2023-4417?

An issue has been identified in Devolutions Remote Desktop Manager versions 2023.2.19 and earlier, where improper access controls within the entry duplication feature may result in an authenticated user unintentionally sharing their personal vault entries with shared vaults. This occurs due to a flaw in the vault selection process during entry duplication, potentially leading to unauthorized access to sensitive information.

Affected Version(s)

Remote Desktop Manager Windows 0 <= 2023.2.19

References

https://devolutions.net/security/advisories/DEVO-2023-0015

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.