What is CVE-2024-11671?

CVE-2024-11671 is a medium-severity vulnerability in Devolutions Remote Desktop Manager, classified under Improper Authentication. CVSS score: 5.4/10. Published 2024-11-25.

How severe is CVE-2024-11671?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Auth bypass in Devolutions Remote Desktop Manager

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.

Vulnerability class: Broken Authentication

EPSS: 0.005 (40.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

Devolutions Remote Desktop Manager — versions 0
Devolutions Remote_desktop_manager

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

security@devolutions.net (Vendor Advisory)

Frequently asked questions

What is CVE-2024-11671?: CVE-2024-11671 is a medium-severity vulnerability in Devolutions Remote Desktop Manager, classified under Improper Authentication. CVSS score: 5.4/10. Published 2024-11-25.
How severe is CVE-2024-11671?: Medium severity. CVSS v3 base score is 5.4 out of 10.