CVE-2026-4829: Devolutions Server: hatalı kimlik doğrulama

Açıklama (NVD)

Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other users, including administrators, via reuse of a session code from an external authentication flow.

Özet bilgiler

Ürün

Devolutions Devolutions Server

CVSS v3.1

5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

%0,17 (yüzdelik 7)

CWE

CWE-287

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• devolutions.net
• CWE-287