CVE-2024-11672 — Devolutions / Remote Desktop Manager

CVE-2024-11672

Devolutions / Remote Desktop Manager PUBLISHED

Description (CNA)

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature.

Affected (CNA)

Vendor / product	Versions
Devolutions / Remote Desktop Manager	affected 0 through 2024.2.21.0

CWE

CWE-863

References

https://devolutions.net/security/advisories/DEVO-2024-0016

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.