VulnerabilityAnalyzed
CVE-2024-2241
Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions
MEDIUM 6.3EPSS 0.40%
Does this matter?
Lower severity and a low EPSS score (0.40%). Track it; it rarely justifies an emergency change on its own.
Description
Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions
- CVSS 3.1
- 6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- EPSS
- 0.40% probability · 34th percentile
- CISA KEV
- Not listed
- Affected
- devolutions/workspace
- Source
- security@devolutions.net
References
- https://devolutions.net/security/advisories/DEVO-2024-0003Vendor Advisory
- https://devolutions.net/security/advisories/DEVO-2024-0003Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.