CVE-2024-1898

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2023.3.14.0 and earlier

Description The issue is related to improper access control in the notification feature, allowing a low-privileged user to change notification settings configured by an administrator.

Recommendations For Devolutions Server versions 2023.3.14.0 and earlier, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.