VulnerabilityAnalyzed

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.

MEDIUM 5.4EPSS 0.53%

Does this matter?

Lower severity and a low EPSS score (0.53%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.1: 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS: 0.53% probability · 43th percentile
CISA KEV: Not listed
Weakness: CWE-287
Affected: devolutions/remote desktop manager
Source: security@devolutions.net

References

https://devolutions.net/security/advisories/DEVO-2024-0016Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.