description: Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PAM propagation scripts to retrieve passwords stored in it via a GET request.
affected:
{
defaultStatus: unaffected
modules: PAM
product: Server
vendor: Devolutions
versions:
lessThanOrEqual: 2023.2.8.0, status: affected, version: 0, versionType: custom
}