CVE Feed

    Dashboard / CVE / CVE-2023-1202

    CVE-2023-1202

    Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.

    Published:Mar 23, 2023
    Last Modified:Feb 20, 2025
    EPS:Mar 23, 2023
    EPSS Score:0.00032
    CVSS Score:6.5

    Affected Products

    Vendor
    Devolutions
    Product
    Remote Desktop Manager

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-78417 (CVSS 4.3) — Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 202…
    CVE-2026-13372 (CVSS 7.2) — Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Ma…
    CVE-2026-12162 (CVSS 5.5) — Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 …
    CVE-2026-12161 (CVSS 8.8) — Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to cr…
    CVE-2026-2590 (CVSS 9.8) — Improper enforcement of the Disable password saving in vaults setting in the connection entry component in D…
    CVE-2026-0747 (CVSS 3.3) — Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Ma…
    CVE-2025-13683 (CVSS 6.5) — Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This i…
    CVE-2025-5334 (CVSS 7.5) — Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions …
    CVE-2025-2600 (CVSS 6.8) — Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an au…
    CVE-2025-2562 (CVSS 5.4) — Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an auth…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High