VULNERABILITY INTELLIGENCE

CVE-2023-4417

CVSS score6.5 MEDIUM
EPSS probability0.54%
CISA KEVNot currently listed
Published2023-08-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references