CVE-2023-2400

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-2400

2.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

I

mproper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access.

References
Link Resource
https://devolutions.net/security/advisories/DEVO-2023-0014 Vendor Advisory
https://devolutions.net/security/advisories/DEVO-2023-0014 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:58

Type Values Removed Values Added
References () https://devolutions.net/security/advisories/DEVO-2023-0014 - Vendor Advisory () https://devolutions.net/security/advisories/DEVO-2023-0014 - Vendor Advisory
Information

Published : 2023-06-20 17:15

Updated : 2024-12-09 19:15

NVD link : CVE-2023-2400

Mitre link : CVE-2023-2400

CVE.ORG link : CVE-2023-2400

JSON object : View

Products Affected

devolutions

CWE
CWE-459

Incomplete Cleanup