CVE-2024-11672

Summary

CVE-2024-11672 is a new cybersecurity vulnerability affecting Devolutions Remote Desktop Manager 2024.2.21 and earlier versions on Windows. This issue involves an incorrect authorization in the "Add permission" component, enabling an authenticated attacker to bypass the permission addition process through the import feature in the vault. Unauthorized access to permissions can lead to serious data breaches or system compromise. It's crucial for users to apply the necessary patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.