Design/Logic Flaw

2021-10-1814:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.

CPENameOperatorVersion
remote_desktop_managerlt2021.2.16

CPE	Name	Operator	Version
	remote_desktop_manager	lt	2021.2.16

References

devolutions.net

devolutions.net/security/advisories/DEVO-2021-0006