CVE-2024-12149CWE-732

Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an…

High · published December 4, 2024

CVSS v3.1
8.1
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an authenticated user that request temporary permissions on an entry to obtain more privileges than requested.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00603 · 48.2th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-12-04T17:18Z
EPSS history
Timeline
  • 04 DEC 17:18Z
    Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an…
    cvelistv5