Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fr2r-2pc4-h4f4

Опубликовано: 04 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password history of an entry without the view password permission.

Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password history of an entry without the view password permission.

EPSS

Процентиль: 48%
0.00252
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 года назад

Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password history of an entry without the view password permission.

EPSS

Процентиль: 48%
0.00252
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863