1. Home
  2. CVE Database
  3. CVE-2023-5358
MEDIUM · 5.3

CVE-2023-5358

Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and earlier allows attackers to retrieve logs from vaults or entries they are not allowed to access via the repo...

Vulnerability Description

Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and earlier allows attackers to retrieve logs from vaults or entries they are not allowed to access via the report request url query parameters.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DevolutionsDevolutions Server< 2023.3.4.0

References

FAQ

What is CVE-2023-5358?

CVE-2023-5358 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and earlier allows attackers to retrieve logs from vaults or entries they are not allowed to access via the repo...

How severe is CVE-2023-5358?

CVE-2023-5358 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-5358?

Check the references section above for vendor advisories and patch information. Affected products include: Devolutions Devolutions Server.