Lucene search

DEVOLUTIONSCVE-2023-1980

HistoryApr 11, 2023 - 6:15 p.m.

CVE-2023-1980

2023-04-1118:15:58

DEVOLUTIONS

web.nvd.nist.gov

cve

2023

1980

two factor authentication

bypass

devolutions remote desktop manager

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

17.6%

JSON

Two factor

authentication

bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to cancel the two factor authentication via the application user interface and open entries.

Affected configurations

Nvd

Node

devolutionsremote_desktop_managerRange≤2022.3.35

VendorProductVersionCPE
devolutionsremote_desktop_manager*cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
devolutions	remote_desktop_manager	*	cpe:2.3:a:devolutions:remote_desktop_manager::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Remote Desktop Manager",
    "vendor": "Devolutions",
    "versions": [
      {
        "lessThanOrEqual": "2022.3.35.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

devolutions.net/security/advisories/DEVO-2023-0009

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

17.6%

JSON

Related for CVE-2023-1980