What’s Vulnerable › Vulnerabilities

CVE-2023-4417

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-21 · updated 2026-06-17

Description

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process.

Affected products

• Devolutions Remote Desktop Manager: through 2023.2.19

References

• https://devolutions.net/security/advisories/DEVO-2023-0015
• https://devolutions.net/security/advisories/DEVO-2023-0015

Get alerted when CVE-2023-4417 or the next vulnerability affects your stack