CVE-2023-0952

—

CVSS 3.1

6.5 medium

EPSS

<1%p49

Published

Mar 1, 2023 (Mar 1, 2023)

Modified

Jun 17, 2026

Description

Improper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an authenticated user to access sensitive data without proper authorization.

Vendors: devolutions
Products: devolutions server
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.