Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.
References
| Link | Resource |
|---|---|
| https://devolutions.net/security/advisories/DEVO-2024-0010 | Vendor Advisory |
| https://devolutions.net/security/advisories/DEVO-2024-0010 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Mar 2025, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Devolutions remote Desktop Manager
Devolutions |
|
| CPE | cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:* cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:* |
|
| References | () https://devolutions.net/security/advisories/DEVO-2024-0010 - Vendor Advisory |
13 Mar 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
21 Nov 2024, 09:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://devolutions.net/security/advisories/DEVO-2024-0010 - |
03 Jul 2024, 02:09
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1262 |
27 Jun 2024, 12:47
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
26 Jun 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-26 17:15
Updated : 2025-03-28 16:19
NVD link : CVE-2024-6354
Mitre link : CVE-2024-6354
CVE.ORG link : CVE-2024-6354
JSON object : View
Products Affected
devolutions
- remote_desktop_manager
CWE
CWE-1262
Register Interface Allows Software Access to Sensitive Data or Security Settings