Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v5hg-wg2p-r5pm

Опубликовано: 22 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9
CVSS3: 8.4

Описание

Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary access requests of other users and gain unauthorized access to vaults and entries via crafted API requests.

Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary access requests of other users and gain unauthorized access to vaults and entries via crafted API requests.

EPSS

Процентиль: 22%
0.00072
Низкий

9 Critical

CVSS4

8.4 High

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 8.4
nvd
4 месяца назад

Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary access requests of other users and gain unauthorized access to vaults and entries via crafted API requests.

EPSS

Процентиль: 22%
0.00072
Низкий

9 Critical

CVSS4

8.4 High

CVSS3

Дефекты

CWE-639