What is CVE-2023-6588?

CVE-2023-6588 is a medium-severity vulnerability in Devolutions Workspace. CVSS score: 6.5/10. Published 2023-12-07.

How severe is CVE-2023-6588?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Devolutions Workspace

CVE-2023-6588

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline.

EPSS: 0.006 (44.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Devolutions Workspace — versions 0

References

security@devolutions.net (Vendor Advisory)

Frequently asked questions

What is CVE-2023-6588?: CVE-2023-6588 is a medium-severity vulnerability in Devolutions Workspace. CVSS score: 6.5/10. Published 2023-12-07.
How severe is CVE-2023-6588?: Medium severity. CVSS v3 base score is 6.5 out of 10.