← All advisories

Medium severity6.5NVD Advisory· Published Apr 2, 2023· Updated Jun 17, 2026

CVE-2023-1603

CVE-2023-1603

Description

Permission bypass when importing or synchronizing entries in User vault

in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Devolutions/Servercpe-rescue3 versions
0+ 2 more
- (no CPE)range: 0
- (no CPE)range: <=2022.3.13
- cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*range: <2023.1.3.0

Patches

Vulnerability mechanics

References

1

devolutions.net/security/advisories/DEVO-2023-0008nvdVendor Advisory

News mentions

0

No linked articles in our index yet.