Workspace Security Vulnerabilities - 2023

CVE-2023-2257

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a HubBusiness space without being prompted to enter the password via anunimplemented "Force Login" security f...

CVE-2023-6588

Offline mode is always enabled, even if permission disallows it, inDevolutions Server data source in Devolutions Workspace 2023.3.2.0 andearlier. This allows an attacker with access to the Workspaceapplication to access credentials when offline.