Описание
Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2023.3.2.0 (включая)
cpe:2.3:a:devolutions:workspace:*:*:*:*:-:*:*:*
EPSS
Процентиль: 56%
0.00339
Низкий
6.5 Medium
CVSS3
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 6.5
github
около 2 лет назад
Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline.
EPSS
Процентиль: 56%
0.00339
Низкий
6.5 Medium
CVSS3
Дефекты
NVD-CWE-noinfo