CVE-2023-1603

—

CVSS 3.1

6.5 medium

EPSS

<1%p48

Published

Apr 2, 2023 (Apr 2, 2023)

Modified

Jun 17, 2026

Description

Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.

Vendors: devolutions
Products: devolutions server
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.