description:
Permission bypass when importing or synchronizing entries in User vault
in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.
affected:
{
defaultStatus: unaffected
product: Server
vendor: Devolutions
versions:
lessThanOrEqual: 2022.3.13, status: affected, version: 0, versionType: custom
}