CVE-2024-11671

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Nov 25, 2024

CWE ID 287

Summary

CVE-2024-11671 is a vulnerability affecting Devolutions Remote Desktop Manager 2024.3.17 and earlier versions on Windows. This issue involves an improper authentication process in SQL data source Multi-Factor Authentication (MFA) validation. An authenticated user can exploit this flaw by manipulating data sources, allowing them to bypass the MFA validation, posing a significant security risk. It is crucial that users upgrade to the latest version of the software to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Devolutions Remote Desktop Manager

Affected Vendors

Devolutions

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/05qzkz
https://www.cve.org/CVERecord?id=CVE-2024-11671
https://nvd.nist.gov/vuln/detail/CVE-2024-11671

Back to Vulnerability Database