CVE-2024-6354

Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*

History

28 Mar 2025, 16:19

Type Values Removed Values Added
References () https://devolutions.net/security/advisories/DEVO-2024-0010 - () https://devolutions.net/security/advisories/DEVO-2024-0010 - Vendor Advisory
CPE cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*
First Time Devolutions
Devolutions remote Desktop Manager

26 Jun 2024, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-26 17:15

Updated : 2025-03-28 16:19


NVD link : CVE-2024-6354

Mitre link : CVE-2024-6354


JSON object : View

Products Affected

devolutions

  • remote_desktop_manager
CWE

No CWE.