Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7qpw-jhj9-8g8x

Опубликовано: 25 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature.

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature.

EPSS

Процентиль: 29%
0.00107
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.3
nvd
около 1 года назад

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature.

EPSS

Процентиль: 29%
0.00107
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863