CVE-2024-10971

Description

Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permission.

Reserved 2024-11-07 | Published 2024-11-12 | Updated 2024-11-20 | Assigner DEVOLUTIONS

Problem types

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Product status

Default status
unaffected

Any version
affected

References

devolutions.net/security/advisories/DEVO-2024-0015/

cve.org (CVE-2024-10971)

nvd.nist.gov (CVE-2024-10971)

Download JSON