CVE-2023-4417

6.5 mediumEPSS 0.5%

Medium (6.5) in devolutions remote desktop manager. EPSS 0.5% chance of exploitation in the next 30 days.

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
Published: 2023-08-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

devolutions:remote_desktop_manager

References

https://devolutions.net/security/advisories/DEVO-2023-0015
https://devolutions.net/security/advisories/DEVO-2023-0015

Check your stack JSON