Portal 
Forum 
Devolutions Force 
Devolutions Hub Business 
Devolutions Hub Personal 
Devolutions Send 
Devolutions Academy 
RDM 
Workspace 
Launcher 
Sicherheit & Regelkonformität
Wir halten die höchsten Standards ein, um Ihre Daten zu schützen und Vertrauen zu gewährleisten.
DEVO-2023-0010
Devolutions Server support ticket endpoints are affected by a security vulnerability.
Betroffene Produkte
Devolutions Server
2023.1.5.0 and below
Änderungsprotokoll
Initial publication - 2023-04-17 Fixed typo - 2023-04-24
Medium 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Endpoint for diagnostic logs not limited to administrators
Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints.
Betroffene Produkte
CVE(s)
CVE-2023-2118
Behebungen und Workarounds
Upgrade to Devolutions Server 2023.1.6.0 or higher
