Portail 
Forum 
Devolutions Force 
Hub Business 
Hub Personal 
Devolutions Send 
Devolutions Academy 
RDM 
Workspace 
Launcher 
Sécurité et conformité
Nous respectons les normes les plus élevées pour protéger vos données et garantir la confiance.
DEVO-2023-0010
Devolutions Server support ticket endpoints are affected by a security vulnerability.
Produits affectés
Journal des modifications
Initial publication - 2023-04-17 Fixed typo - 2023-04-24
Medium 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Endpoint for diagnostic logs not limited to administrators
Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints.
Produits affectés
CVE(s)
CVE-2023-2118
Mesures correctives et solutions de contournement
Upgrade to Devolutions Server 2023.1.6.0 or higher
Crédits
Jico