Vulnerabilities

TI-2024-02080 CVE-2024-2241 · GHSA-4pmx-grr5-rmvm

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and…

LOW 28

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00401 Published 2024-03-07 No fix listed

TI-2023-06037 CVE-2023-6588 · GHSA-3mp7-3wf9-mp89

Offline mode is always enabled, even if permission disallows it, in Devolutions Server…

LOW 30

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00589 Published 2023-12-07 No fix listed

TI-2023-02116 CVE-2023-2257 · GHSA-2rx2-wvh6-wg6m

Incorrect authorization in Devolutions Workspace Desktop

LOW 33

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub Business space without b…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00179 Published 2023-04-24 No fix listed CWE-863

Vulnerabilities

Filters

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and…

Offline mode is always enabled, even if permission disallows it, in Devolutions Server…

Incorrect authorization in Devolutions Workspace Desktop