← Database

CVE-2023-2445

MEDIUM CVSS: 4.9 Published: 2023-05-02 Modified: 2026-06-17

Description

Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrieve usage information on folders in user vaults via a specific folder name.

Affected Platforms

Devolutions Devolutions Server

Weakness Type

NVD-CWE-Other, CWE-346

References