CVE-2024-1900

Improper session management in the identity provider authentication flow in Devolutions Server 2023.3.14.0 and earlier allows an authenticated user via an identity provider to stay authenticated after his user is disabled or deleted in the identity provider such as Okta or Microsoft O365. The use...

CVE-2024-1900

The Devolutions Server (version 2023.3.14.0 and earlier) contains a vulnerability due to improper session management within the identity provider authentication flow. This flaw allows an authenticated user, who logged in via an identity provider like Okta or Microsoft O365 , to remain authenticat...