Vulnerability Database

299,038

Total vulnerabilities in the database

CVE-2023-5240

Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PAM propagation scripts to retrieve passwords stored in it via a GET request.

  • Published: Oct 13, 2023
  • Updated: Oct 18, 2023
  • CVE: CVE-2023-5240
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
devolutions / devolutions_server - 2023.2.8.0.x