Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrieve usage information on folders in user vaults via a specific folder name.
https://devolutions.net/security/advisories/DEVO-2023-0013/
Source: Mitre, NVD
Published: 2023-05-02
Updated: 2023-05-09
Base Score: 6.1
Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:N/A:N
Severity: Medium
Base Score: 4.9
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N