- Description
- Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.
- Source
- security@devolutions.net
- NVD status
- Analyzed
CVSS 3.1
- Type
- Secondary
- Base score
- 7.2
- Impact score
- 5.9
- Exploitability score
- 1.2
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-1262
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "FBA312E3-411A-439F-BD23-8C8B22A5BE0E",
"versionEndExcluding": "2024.2.12.0"
},
{
"criteria": "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "2CD07B0A-8CB9-4FAF-A330-58533C04D56B",
"versionEndExcluding": "2024.2.12.0"
}
],
"operator": "OR"
}
]
}
]