{ "id": "CVE-2023-2445", "sourceIdentifier": "security@devolutions.net", "published": "2023-05-02T14:15:09.207", "lastModified": "2023-05-02T14:15:09.207", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrieve usage information on folders in user vaults via a specific folder name." } ], "metrics": {}, "references": [ { "url": "https://devolutions.net/security/advisories/DEVO-2023-0013/", "source": "security@devolutions.net" } ] }