We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-12149



Description

Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an authenticated user that request temporary permissions on an entry to obtain more privileges than requested.

Reserved 2024-12-04 | Published 2024-12-04 | Updated 2024-12-05 | Assigner DEVOLUTIONS

Problem types

CWE-732: Incorrect Permission Assignment for Critical Resource

Product status

Default status
unaffected

Any version
affected

References

devolutions.net/security/advisories/DEVO-2024-0017

cve.org (CVE-2024-12149)

nvd.nist.gov (CVE-2024-12149)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2024-12149

Support options

Helpdesk Chat, Email, Knowledgebase