Medium · 5.4 CVE-2024-11671 EUVD-2024-33948GHSA-xfg6-fr73-q2fq

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an …

Published Nov 25, 2024 · Updated Nov 25, 2024 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Remote Desktop Manager

Description

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.

Affected products

Vendor	Product	Affected	Fixed
Devolutions	Remote Desktop Manager	≤ 2024.3.17	—

References

https://devolutions.net/security/advisories/DEVO-2024-0016