CVE-2023-1202

—

CVSS 3.1

6.5 medium

EPSS

<1%p37

Published

Apr 2, 2023 (Apr 2, 2023)

Modified

Jun 17, 2026

Description

Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.

Vendors: devolutions
Products: remote desktop manager
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.