CVE-2024-11671

Published Nov 25, 2024

Last updated 3 months ago

CVSS medium 5.4

Overview

Description: Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.
Source: security@devolutions.net
NVD status: Received

Risk scores

CVSS 3.1

Type: Secondary
Base score: 5.4
Impact score: 2.5
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Severity: MEDIUM

Weaknesses

security@devolutions.net: CWE-287

Hype score: Not currently trending

CVE-2024-11671 Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypas… https://t.co/AwJOE95OnL
@CVEnew
25 Nov 2024
340 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References