Lucene search
DEVOLUTIONSVULNRICHMENT:CVE-2024-4846HistoryJun 25, 2024 - 12:18 p.m.
CVE-2024-4846
2024-06-2512:18:18
DEVOLUTIONS
github.com
2
authentication
bypass
2fa
devolutions server
AI Score
6.8
Confidence
Low
EPSS
0
Percentile
9.1%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab.
CNA Affected
[
{
"vendor": "Devolutions",
"product": "Server",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2024.1.14.0"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2024-4846
2024-06-25 13:15:50
cvelist
cvelist
CVE-2024-4846
2024-06-25 12:18:18
cve
cve
CVE-2024-4846
2024-06-25 13:15:50
AI Score
6.8
Confidence
Low
EPSS
0
Percentile
9.1%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-4846