Описание
Permission bypass when importing or synchronizing entries in User vault
in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2023.1.10 (исключая)
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 11%
0.00038
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-863
CWE-863
Связанные уязвимости
CVSS3: 6.5
github
почти 3 года назад
Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.
EPSS
Процентиль: 11%
0.00038
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-863
CWE-863