CVE-2024-11671CWE-287

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user…

Medium · published November 25, 2024

CVSS v3.1
5.4
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-11-25T14:46Z
EPSS history
Timeline
  • 25 NOV 14:46Z
    Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user…
    cvelistv5