Design/Logic Flaw

2023-08-2119:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

inadequate validation

remote tools

macros

execution rights

nvd

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.0%

JSON

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature.

CPENameOperatorVersion
remote_desktop_managerle2023.2.19

CPE	Name	Operator	Version
	remote_desktop_manager	le	2023.2.19

References

devolutions.net/security/advisories/DEVO-2023-0015/