Devolutions: >> Devolutions Server >> 2022.3.12.0 Security Vulnerabilities
Permission bypass when importing or synchronizing entries in User vault
in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.
CVSS Score
6.5
EPSS Score
0.006
Published
2023-04-02
Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.
CVSS Score
6.5
EPSS Score
0.008
Published
2023-03-10
Page 10