CVE-2024-11672

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature...

CVE-2024-11672

creationtimestamp| type| source ---|---|--- 2024-11-25 14:52:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113544158828460718...

CVE-2024-11672

Devolutions Remote Desktop Manager version 2024.2.21 and earlier on Windows is vulnerable to an incorrect authorization flaw in the add permission component . An authenticated malicious user can bypass the "Add" permission by utilizing the import in vault feature. To remediate this, users should ...