CyberRota Analysis
AI-GeneratedImproper access control in the NetBox synchronizer of Devolutions Server allows authenticated users with view-only permissions to access stored API tokens through the partial connection endpoint. This vulnerability could lead to unauthorized access to sensitive data and potential exploitation of the API. Organizations using affected versions of Devolutions Server should prioritize remediation to mitigate the risk of credential exposure.
Original NVD Description
Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the partial connection endpoint. This issue affects : * Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier
Related CVEs
Other vulnerabilities affecting the same vendor(s)