VULNERABILITY INTELLIGENCE

CVE-2024-12196

CVSS score6.5 MEDIUM

EPSS probability0.46%

CISA KEVNot currently listed

Published2024-12-04

Last modified2026-06-17

Description

Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password history of an entry without the view password permission.