description: Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints.
affected:
{
defaultStatus: unaffected
platforms: Windows
product: Devolutions Server
vendor: Devolutions
versions:
lessThan: 2023.1.6.0, status: affected, version: 0, versionType: custom
}