Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server
Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server.
This issue affects :
Exploitability
AV:NAC:HPR:LUI:NScope
S:CImpact
C:HI:LA:N7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:NInput Validation