What’s Vulnerable › Vulnerabilities

CVE-2023-5240

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-13 · updated 2026-06-17
• Weakness: CWE-284

Description

Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PAM propagation scripts to retrieve passwords stored in it via a GET request.

Affected products

• Devolutions Server: through 2023.2.8.0

References

• https://devolutions.net/security/advisories/DEVO-2023-0017
• https://devolutions.net/security/advisories/DEVO-2023-0017

Get alerted when CVE-2023-5240 or the next vulnerability affects your stack