CVE-2023-1201

Published: Mar 6, 2023

Modified: Mar 6, 2025

PUBLISHED

Description

Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.

Vendor	Product	Versions
Devolutions	Devolutions Server	affected `0 - <= 2022.3.12`

References

https://devolutions.net/security/advisories/DEVO-2023-0005

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-1201

Description

Affected Products

References