CVE-2024-12148

Publication date

2024-12-04 17:18:21

Family

DEVOLUTIONS

State

PUBLISHED

Description

Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints.