devolutions_server Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/devolutions_server/ Thu, 23 Feb 2023 14:10:41 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png devolutions_server Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/devolutions_server/ 32 32 CVE-2021-36382 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36382/ Thu, 23 Feb 2023 14:10:41 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36382/ Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).

The post CVE-2021-36382 appeared first on CVE Vulnerability.

]]> Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).

The post CVE-2021-36382 appeared first on CVE Vulnerability.

]]> CVE-2021-28157 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-28157/ Thu, 23 Feb 2023 14:08:43 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-28157/ An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete.

The post CVE-2021-28157 appeared first on CVE Vulnerability.

]]> An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete.

The post CVE-2021-28157 appeared first on CVE Vulnerability.

]]> CVE-2021-28048 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-28048/ Thu, 23 Feb 2023 14:08:42 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-28048/ An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker to leak cross-origin data via a crafted HTML page.

The post CVE-2021-28048 appeared first on CVE Vulnerability.

]]> An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker to leak cross-origin data via a crafted HTML page.

The post CVE-2021-28048 appeared first on CVE Vulnerability.

]]> CVE-2021-23921 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-23921/ Thu, 23 Feb 2023 14:07:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-23921/ An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements.

The post CVE-2021-23921 appeared first on CVE Vulnerability.

]]> An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements.

The post CVE-2021-23921 appeared first on CVE Vulnerability.

]]> CVE-2021-23923 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-23923/ Thu, 23 Feb 2023 14:07:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-23923/ An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users.

The post CVE-2021-23923 appeared first on CVE Vulnerability.

]]> An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users.

The post CVE-2021-23923 appeared first on CVE Vulnerability.

]]> CVE-2021-23924 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-23924/ Thu, 23 Feb 2023 14:07:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-23924/ An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files.

The post CVE-2021-23924 appeared first on CVE Vulnerability.

]]> An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files.

The post CVE-2021-23924 appeared first on CVE Vulnerability.

]]> CVE-2021-23925 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-23925/ Thu, 23 Feb 2023 14:07:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-23925/ An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting (XSS) vulnerability in entries of type Document.

The post CVE-2021-23925 appeared first on CVE Vulnerability.

]]> An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting (XSS) vulnerability in entries of type Document.

The post CVE-2021-23925 appeared first on CVE Vulnerability.

]]> CVE-2022-33996 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-33996/ Thu, 23 Feb 2023 05:19:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-33996/ Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user.

The post CVE-2022-33996 appeared first on CVE Vulnerability.

]]> Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user.

The post CVE-2022-33996 appeared first on CVE Vulnerability.

]]> CVE-2022-2316 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-2316/ Thu, 23 Feb 2023 05:02:59 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-2316/ HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site.

The post CVE-2022-2316 appeared first on CVE Vulnerability.

]]> HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site.

The post CVE-2022-2316 appeared first on CVE Vulnerability.

]]> CVE-2023-0661 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0661/ Wed, 22 Feb 2023 14:02:15 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0661 Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.

The post CVE-2023-0661 appeared first on CVE Vulnerability.

]]> Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.

The post CVE-2023-0661 appeared first on CVE Vulnerability.

]]>