VULNERABILITY INTELLIGENCE

CVE-2023-1603

CVSS score6.5 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2023-04-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.

Weakness classification

  • nvd@nist.gov: CWE-863
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-863

Primary references