CVEvulnerability
CVE-2023-4417
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process.
Affected configurations
• devolutions remote desktop manager (<= 2023.2.19)
References
- https://devolutions.net/security/advisories/DEVO-2023-0015 Vendor Advisory
- https://devolutions.net/security/advisories/DEVO-2023-0015 Vendor Advisory