Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rp3r-3vq4-29fg

Опубликовано: 25 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab.

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab.

EPSS

Процентиль: 26%
0.00092
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 6.3
nvd
больше 1 года назад

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab.

EPSS

Процентиль: 26%
0.00092
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-290