CVE-2024-12148: Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some...
0.0
CVSS
Description
Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints.
Classification
CVE ID: CVE-2024-12148
CVSS Base Severity: LOW
CVSS Base Score: 0.0
Affected Products
Vendor: Devolutions
Product: Server
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)