Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-27mx-5g65-22g6

Опубликовано: 25 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypass the "View Password" permission via specific actions.

Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypass the "View Password" permission via specific actions.

EPSS

Процентиль: 36%
0.00148
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.4
nvd
12 месяцев назад

Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypass the "View Password" permission via specific actions.

EPSS

Процентиль: 36%
0.00148
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-863