CVE-2024-11670 — Devolutions / Remote Desktop Manager

CVE-2024-11670

Devolutions / Remote Desktop Manager PUBLISHED

Description (CNA)

Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypass the "View Password" permission via specific actions.

Affected (CNA)

Vendor / product	Versions
Devolutions / Remote Desktop Manager	affected 0 through 2024.2.21.0

CWE

CWE-863

References

https://devolutions.net/security/advisories/DEVO-2024-0015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.