Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-878r-8w43-p6c6

Опубликовано: 06 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Improper access control in Devolutions Server 2025.3.5.0 and earlier allows a View-only user to retrieve sensitive third-level nested fields, such as password lists custom values, resulting in password disclosure.

Improper access control in Devolutions Server 2025.3.5.0 and earlier allows a View-only user to retrieve sensitive third-level nested fields, such as password lists custom values, resulting in password disclosure.

EPSS

Процентиль: 13%
0.00044
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 6.5
nvd
3 месяца назад

Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as password lists custom values, resulting in password disclosure. This issue affects the following versions : * Devolutions Server 2025.3.2.0 through 2025.3.5.0 * Devolutions Server 2025.2.15.0 and earlier

EPSS

Процентиль: 13%
0.00044
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-284