CVE-2024-11671 - AskarLabs CVE Database

CVE-2024-11671

Vendor Devolutions

Product Remote Desktop Manager

Weakness CWE-287 · Improper authentication

Published November 25, 2024

Last update November 25, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.

Key dates

02Disclosure timeline

November 25, 2024 CVE published

November 25, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-11671 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2022-38744 FactoryTalk Alarm and Events Server Vulnerable to Denial-Of-Service Attack CVE-2026-50623 Apache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService CVE-2023-30845 ESPv2 vulnerable to JWT authentication bypass via `X-HTTP-Method-Override` header CVE-2022-2197 Exemys RME1 CVE-2024-7487 Improper Authentication in WSO2 Identity Server 7.0.0 Allows Bypass of App-Native Authentication