CVE-2024-11672CWE-863

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated…

Medium · published November 25, 2024

CVSS v3.1
4.3
EPSS
1%
Percentile
45.3
In the wild
Unconfirmed
What it is

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00550 · 45.3th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-11-25T14:46Z
EPSS history
Timeline
  • 25 NOV 14:46Z
    Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated…
    cvelistv5