Lucene search
+L

310 matches found

Cvelist
Cvelist
•added 2023/12/12 2:32 p.m.•43 views

CVE-2023-6593

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

9.6AI score0.00725EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•3 views

CVE-2023-6593: Incorrect Permission Assignment for Critical Resource

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

9.8CVSS8.3AI score0.00725EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/12/12 12:00 a.m.•16 views

Devolutions Remote Desktop Manager Security Vulnerability

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2023.3.4.0 and prior versions, which originated from a vulnerability that allows an...

9.8CVSS7.6AI score0.00725EPSS
SaveExploits0References2
NVD
NVD
•added 2023/11/01 6:15 p.m.•22 views

CVE-2023-5765

Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass permissions via data source switching...

9.8CVSS9.6AI score0.00612EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/11/01 5:12 p.m.•21 views

CVE-2023-5765

Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass permissions via data source switching...

7.2AI score0.00612EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/01 5:12 p.m.•62 views

CVE-2023-5765

The CVE-2023-5765 entry concerns Devolutions Remote Desktop Manager (Windows) with versions 2023.2.33 and earlier, where an improper access control in the password analyzer allows bypassing permissions via data source switching. Exploitation details are not provided in the documents, and the core...

9.8CVSS9.5AI score0.00612EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/01 5:12 p.m.•32 views

CVE-2023-5765

Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass permissions via data source switching...

9.8AI score0.00612EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/01 12:00 a.m.•15 views

PT-2023-32311 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2023.2.33 and earlier Description: The issue is related to improper access control in the password analyzer feature, allowing an attacker to bypass permissions via data source switching. This can be...

9.8CVSS9.4AI score0.00612EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•2 views

CVE-2023-5765: Undefined Security Weakness

Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass permissions via data source switching...

9.8CVSS8.2AI score0.00612EPSS
SaveExploits0References1
NVD
NVD
•added 2023/08/21 7:15 p.m.•31 views

CVE-2023-4417

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in th...

6.5CVSS6.5AI score0.00541EPSS
SaveExploits0References1
OSV
OSV
•added 2023/08/21 7:15 p.m.•20 views

CVE-2023-4373

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature...

9.8CVSS5.9AI score0.00718EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/21 7:15 p.m.•22 views

Improper access control

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in th...

4CVSS6.5AI score0.00541EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/21 6:38 p.m.•15 views

CVE-2023-4417

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in th...

6.8AI score0.00541EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/08/21 6:38 p.m.•44 views

CVE-2023-4417

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in th...

6.7AI score0.00541EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/21 6:38 p.m.•70 views

CVE-2023-4417

The CVE-2023-4417 issue affects Devolutions Remote Desktop Manager for Windows up to 2023.2.19, caused by improper access controls in the entry duplication component. An authenticated user can, under certain conditions, share a personal vault entry with shared vaults via an incorrect vault during...

6.5CVSS6.4AI score0.00541EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/21 6:36 p.m.•52 views

CVE-2023-4373

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature...

9.7AI score0.00718EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/21 12:00 a.m.•3 views

CVE-2023-4373: Improper Authentication

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature...

9.8CVSS8.3AI score0.00718EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/08/21 12:00 a.m.•16 views

Devolutions Remote Desktop Manager 授权问题漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2023.2.19 and prior versions that stems from insufficient privilege validation. An...

9.8CVSS8.5AI score0.00718EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/21 12:00 a.m.•6 views

CVE-2023-4417: Undefined Security Weakness

Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in th...

6.5CVSS6.6AI score0.00541EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/08/21 12:00 a.m.•14 views

PT-2023-29140 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2023.2.19 and earlier Description: The issue is related to improper access controls in the entry duplication component, allowing an authenticated user, under specific circumstances, to inadvertently...

6.5CVSS6.3AI score0.00541EPSS
SaveExploits0References5
Rows per page
Query Builder