Improper Access Control in Devolutions Server Affects Sensitive Log Retrieval

CVE-2023-5358

What is CVE-2023-5358?

The vulnerability in Devolutions Server involves improper access control within the report log filters feature, which enables unauthorized users to exploit the system. Attackers can manipulate report request URL query parameters to retrieve sensitive logs from vaults or entries that they should not have access to. This poses a significant risk to the confidentiality of the logged information, allowing potential exposure of sensitive data.

References