VULNERABILITY INTELLIGENCE

CVE-2024-11672

CVSS score4.3 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2024-11-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature.

Weakness classification

  • security@devolutions.net: CWE-863
  • nvd@nist.gov: CWE-863

Primary references