CVE-2023-4417 : Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process.

Published 2023-08-21 19:15:09

Updated 2023-08-25 17:55:23

Source Devolutions Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2023-4417

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 28 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-4417

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	3.9	6.0	Devolutions Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

Products affected by CVE-2023-4417

Devolutions » Remote Desktop Manager
Versions up to, including, (<=) 2023.2.19
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A

Vulnerability Details : CVE-2023-4417

Exploit prediction scoring system (EPSS) score for CVE-2023-4417

CVSS scores for CVE-2023-4417

References for CVE-2023-4417

Products affected by CVE-2023-4417