Devolutions Archives - CVE Vulnerability

CVE-2020-36211

Sun, 26 Feb 2023 06:41:34 +0000

An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.

The post CVE-2020-36211 appeared first on CVE Vulnerability.

CVE-2021-42098

Thu, 23 Feb 2023 14:12:11 +0000

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.

The post CVE-2021-42098 appeared first on CVE Vulnerability.

CVE-2021-36382

Thu, 23 Feb 2023 14:10:41 +0000

Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).

The post CVE-2021-36382 appeared first on CVE Vulnerability.

CVE-2021-28157

Thu, 23 Feb 2023 14:08:43 +0000

An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete.

The post CVE-2021-28157 appeared first on CVE Vulnerability.

CVE-2021-28048

Thu, 23 Feb 2023 14:08:42 +0000

An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker to leak cross-origin data via a crafted HTML page.

The post CVE-2021-28048 appeared first on CVE Vulnerability.

CVE-2021-28047

Thu, 23 Feb 2023 14:08:42 +0000

Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields.

The post CVE-2021-28047 appeared first on CVE Vulnerability.

CVE-2021-23925

Thu, 23 Feb 2023 14:07:37 +0000

An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting (XSS) vulnerability in entries of type Document.

The post CVE-2021-23925 appeared first on CVE Vulnerability.

CVE-2021-23924

Thu, 23 Feb 2023 14:07:37 +0000

An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files.

The post CVE-2021-23924 appeared first on CVE Vulnerability.

CVE-2021-23923

Thu, 23 Feb 2023 14:07:37 +0000

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users.

The post CVE-2021-23923 appeared first on CVE Vulnerability.

CVE-2021-23922

Thu, 23 Feb 2023 14:07:37 +0000

An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting (XSS) vulnerability in webviews.

The post CVE-2021-23922 appeared first on CVE Vulnerability.