CVE-2023-5575 (devolutions_server)

Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a low privileged user to access entries via a specific combination of permissions in the entry and in its parent.

access access control attacker compromised control cve devolutions entry low permission permissions privileged privileged user server server 2022