CVE-2022-33996

2022-07-0711:19:54

mitre

www.cve.org

devolution server

incorrect permission management

inherit permissions

cve-2022-33996

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user.

References

devolutions.net

devolutions.net/security/advisories/DEVO-2022-0006