Lucene search

K
vulnrichmentDEVOLUTIONSVULNRICHMENT:CVE-2023-5240
HistoryOct 13, 2023 - 12:22 p.m.

CVE-2023-5240

2023-10-1312:22:23
DEVOLUTIONS
github.com
1
improper access control
pam propagation scripts
devolutions server 2023.2.8.0
get request
password retrieval

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PAM propagation scripts to retrieve passwords stored in it via a GET request.

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-5240