Lucene search

K
vulnrichmentDEVOLUTIONSVULNRICHMENT:CVE-2023-5575
HistoryOct 16, 2023 - 1:29 p.m.

CVE-2023-5575

2023-10-1613:29:57
DEVOLUTIONS
github.com
1
improper access control
devolutions server
2022.3.13.0

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a low privileged user to access entries via a specific combination of permissions in the entry and in its parent.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-5575