CVE-2023-5240 | BDVDB-2026-214032 Detail

DevolutionsServer

Description#

Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PAM propagation scripts to retrieve passwords stored in it via a GET request.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-284 Improper Access Control

References#

https://devolutions.net/security/advisories/DEVO-2023-0017

Exploit#

No public exploit known

History#

Version 12023-10-13Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.