Lucene search

[email protected]CVE-2023-2257

HistoryApr 24, 2023 - 7:15 p.m.

CVE-2023-2257

2023-04-2419:15:09

CWE-863

[email protected]

web.nvd.nist.gov

cve-2023-2257

authentication bypass

hub business integration

devolutions workspace desktop

security vulnerability

force login

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.9%

JSON

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub
Business space without being prompted to enter the password via an
unimplemented “Force Login” security feature.

This vulnerability occurs only if “Force Login” feature is enabled on the Hub Business instance and that an attacker has access to a locked Workspace desktop application configured with a Hub Business space.

Affected configurations

NVD

Node

devolutionsworkspaceRange<2023.1.1.4desktop

AND

applemacosMatch-

microsoftwindowsMatch-

CPENameOperatorVersion
devolutions:workspacedevolutions workspacelt2023.1.1.4

CPE	Name	Operator	Version
devolutions:workspace	devolutions workspace	lt	2023.1.1.4

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Hub Business Integration"
    ],
    "platforms": [
      "Windows",
      "MacOS"
    ],
    "product": "Workspace Desktop",
    "vendor": "Devolutions",
    "versions": [
      {
        "lessThanOrEqual": "2023.1.1.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

devolutions.net/security/advisories/DEVO-2023-0011

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.9%

JSON

Related for CVE-2023-2257

nvd1 cvelist1 prion1