CVE-2021-23924

CVE-2021-23924 is a high-severity information exposure vulnerability affecting Devolutions Server versions prior to 2020.3, where sensitive data can be inadvertently disclosed within diagnostic files. This vulnerability has a CVSS score of 7.5, indicating a high impact on confidentiality due to its network-based attack vector and low attack complexity, requiring no user interaction or privileges. While there is no evidence of active exploitation, publicly available exploit code, or inclusion in the CISA KEV catalog, the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity community.