CVE-2024-12196: Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password...
0.0
CVSS
Description
Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password history of an entry without the view password permission.
Classification
CVE ID: CVE-2024-12196
CVSS Base Severity: LOW
CVSS Base Score: 0.0
Affected Products
Vendor: Devolutions
Product: Server
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)