CVE-2023-1201: Devolutions Server

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.

Affected products

• Devolutions Devolutions Server: before 2022.3.13 (fixed in 2022.3.13)

Published 2023-03-10. Last modified 2026-06-17.