Portail
Forum
Devolutions Force
Hub Business
Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Sécurité et conformité
DEVO-2023-0008
Résumé
Devolutions Server and Remote Desktop Manager are affected by multiple security vulnerabilities.
Produits affectés
Remote Desktop Manager 2023.1.9 and belowDevolutions Server 2022.3.13 and below
Journal des modifications
Initial Publication - 2023-03-23
Sévérité
High
Produit
Remote Desktop Manager, Devolutions Server
Version corrigée
RDM 2023.1.10, DVLS 2023.1.0
Permission bypass when importing or synchronizing entries (CVE-2023-1202)
Description
Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.
Mesures correctives et solutions de contournement
Update to Remote Desktop Manager 2023.1.10 or higher
Sévérité
High (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N 7.3)
Produits affectés
Remote Desktop Managers 2023.1.9 and earlier
CVE(s)
CVE-2023-1202
Permission bypass when importing or synchronizing entries (CVE-2023-1603)
Description
Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.
Mesures correctives et solutions de contournement
Update to Devolutions Server 2023.1.3.0 or higher
Sévérité
High (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N 7.3)
Produits affectés
Devolutions Server 2022.3.13 and earlier
CVE(s)
CVE-2023-1603
