← All advisories

Medium severity6.5NVD Advisory· Published Apr 2, 2023· Updated Jun 17, 2026

CVE-2023-1202

CVE-2023-1202

Description

Permission bypass when importing or synchronizing entries in User vault

in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Devolutions/Remote Desktop Manager3 versions
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*range: <2023.1.10
- (no CPE)range: <=2023.1.9
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

devolutions.net/security/advisories/DEVO-2023-0008nvdVendor Advisory

News mentions

0

No linked articles in our index yet.