{
  "cveId": "CVE-2023-1202",
  "url": "https://patchblox.com/security/cve/CVE-2023-1202",
  "summary": "CVE-2023-1202 is fixed in Remote Desktop Manager on 1 platform by Remote Desktop Manager 2023.1.10.0 (version 2023.1.10.0), released March 13, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Remote Desktop Manager: Incorrect Authorization",
  "description": "Permission bypass when importing or synchronizing entries\u00A0in User vault\n\n in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.",
  "published": "2023-04-02T21:15:08Z",
  "severity": "",
  "cvss": 6.5,
  "cwe": "CWE-863: Incorrect Authorization",
  "epss": 0.00439,
  "epssPercentile": 0.38361,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2023-1202",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Remote Desktop Manager",
      "fixedVersion": "2023.1.10.0",
      "fix": "Remote Desktop Manager 2023.1.10.0",
      "url": "https://patchblox.com/security/fix/windows-app/devolutions.remotedesktopmanager-2023.1.10.0",
      "released": "2023-03-13T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}