Skip to content
OpenAdvisories
High · 8.1 CVE-2024-12149 EUVD-2024-50628GHSA-7vhq-gphw-vgj2

Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Win…

Published Dec 4, 2024 · Updated Dec 5, 2024 · Assigned by DEVOLUTIONS

Description

Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an authenticated user that request temporary permissions on an entry to obtain more privileges than requested.

Affected products

VendorProductAffectedFixed
Devolutions Remote Desktop Manager ≤ 2024.3.19.0 —

References