published December 12, 2023
⚠️ A crafty sidestep in permissions allows attackers to execute SQL commands without restrictions! Devolutions Remote Desktop Manager versions 2023.3.4.0 and earlier on iOS are affected! Think of it like a restaurant where an unauthorized diner can order anything from the menu without paying — it’s not supposed to happen, but here we are! An attacker gaining access to the app can execute any SQL entry, leading to unauthorized data manipulation or retrieval. This could mean sensitive information gets spilled without anyone even knowing!
Think of it like a restaurant where an unauthorized diner can order anything from the menu without paying — it’s not supposed to happen, but here we are! This vulnerability allows unauthorized users who have access to the Devolutions Remote Desktop Manager on iOS to bypass client-side permissions, enabling them to execute SQL commands freely on the data source.
An attacker gaining access to the app can execute any SQL entry, leading to unauthorized data manipulation or retrieval. This could mean sensitive information gets spilled without anyone even knowing! To protect against this, users should upgrade to the latest version of Devolutions Remote Desktop Manager immediately. Additionally, ensure access controls are properly enforced and restrict application access as needed. You've got this! Update those systems and keep your data safe! 🛡️