Portal
Forum
Devolutions Force
Devolutions Hub Business
Devolutions Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Security & Compliance
DEVO-2023-0020
Zusammenfassung
Devolutions Server is affected by a security vulnerability.
Betroffene Produkte
Devolutions Server 2023.3.7.0 and earlier
Änderungsprotokoll
2023-11-22 - Initial Publication
Schweregrad
Low
Produkt
Devolutions Server
Behobene Version
Devolutions Server 2023.3.8.0
Information leak in Content-Security-Policy header
Beschreibung
Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an unauthenticated attacker to list the configured Devolutions Gateways endpoints.
Behebungen und Workarounds
Upgrade to Devolutions Server 2023.3.8 or higher
Schweregrad
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/U:Green 6.3 Medium
Betroffene Produkte
Devolutions Server 2023.3.7 and earlier
CVE(s)
CVE-2023-6264
