CVE-2021-23921: Critical severity devolutions server vulnerability
Published Apr 1, 2021
·Updated
An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements.
Affected Software
1 affected component
Devolutions Devolutions Server<2020.3
Event History
Apr 1, 2021
CVE Published
via MITRE·09:46 PM
Data Sourced
via MITRE·09:46 PM
Description
Frequently Asked Questions
1
What is CVE-2021-23921?
CVE-2021-23921 is a vulnerability found in Devolutions Server before 2020.3 that allows broken access control on Password List entry elements.
2
How does CVE-2021-23921 affect Devolutions Server?
CVE-2021-23921 affects Devolutions Server before 2020.3 by creating broken access control on Password List entry elements.
3
What is the severity of CVE-2021-23921?
The severity of CVE-2021-23921 is critical with a CVSS score of 9.1.
4
Can CVE-2021-23921 be fixed?
Yes, CVE-2021-23921 can be fixed by updating Devolutions Server to version 2020.3 or later.
5
Where can I find more information about CVE-2021-23921?
You can find more information about CVE-2021-23921 in the Devolutions Server security advisory at https://devolutions.net/security/advisories/devo-2021-0002.