CVE-2023-0952: Medium severity devolutions server vulnerability
Improper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an authenticated user to access sensitive data without proper authorization.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-0952?
CVE-2023-0952 is a vulnerability in Devolutions Server 2022.3.12 and earlier that allows an authenticated user to access sensitive data without proper authorization.
How severe is CVE-2023-0952?
CVE-2023-0952 has a severity rating of 6.5, which is considered medium.
How can an authenticated user exploit CVE-2023-0952?
An authenticated user can exploit CVE-2023-0952 by improperly accessing entries in Devolutions Server 2022.3.12 and earlier, allowing them to access sensitive data without proper authorization.
Is there a fix for CVE-2023-0952?
To fix CVE-2023-0952, users should update to a version of Devolutions Server that is not affected by the vulnerability.
Where can I find more information about CVE-2023-0952?
More information about CVE-2023-0952 can be found in the security advisory published by Devolutions at https://devolutions.net/security/advisories/DEVO-2023-0003.