CVE-2024-12148 - AskarLabs CVE Database

CVE-2024-12148

Vendor Devolutions

Product Server

Weakness CWE-863 · Incorrect authorization

Published December 4, 2024

Last update December 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints.

Key dates

02Disclosure timeline

December 4, 2024 CVE published

December 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-12148 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/863.html