CoreCVE
Back

MEDIUM

Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass administrator-enforced Web Login restrictions and gain access to entries via an unexpected vector

Published Apr 25, 2023

Description

Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass administrator-enforced Web Login restrictions and gain access to entries via an unexpected vector.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner DEVOLUTIONS
Published Apr 25, 2023
Updated Feb 4, 2025
Reserved Apr 25, 2023
Link CVE-2023-2282

CISA Vulnrichment

Updated Feb 4, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2023-2282

Red Hat

No data

ENISA EUVD

Assigner DEVOLUTIONS
Published Apr 25, 2023
Updated Feb 4, 2025
Link EUVD-2023-33788

GitHub

No data