CVE-2023-2400

Published: Jun 20, 2023Modified: Jun 17, 2026

2.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.2 / Impact: 1.4

Source: NVD

Description

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access.

Affected (1)

Products: Devolutions: Devolutions Server

Devolutions

1 product

Devolutions Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Devolutions Devolutions Server	Before 2023.2.1

Related CWEs

CWE-459

Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (2)

https://devolutions.net/security/advisories/DEVO-2023-0014

Source: security@devolutions.net

Vendor Advisory

https://devolutions.net/security/advisories/DEVO-2023-0014

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.