CVE-2024-2241

Devolutions Workspace version 2024.1.0 and earlier are affected by an improper access control vulnerability in the user interface. This flaw allows an authenticated user to perform unintended actions by leveraging specific permissions. While the vulnerability has been sighted in the wild, no spec...

CVE-2023-2257

CVE-2023-2257 affects Devolutions Workspace Desktop (Hub Business integration) up to version 2023.1.1.3 on Windows/macOS. The issue is an authentication bypass: when the Force Login feature is enabled and a user has access to a locked Workspace desktop with a Hub Business space, an attacker can u...