Portail
Forum
Devolutions Force
Hub Business
Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Sécurité et conformité
DEVO-2023-0022
Résumé
Devolutions Workspace is affected by a vulnerability.
Produits affectés
Devolutions Workspace 2023.3.2.0 and earlier
Journal des modifications
2023-12-07 - Initial publication
Sévérité
Low
Produit
Devolutions Workspace
Version corrigée
2023.3
Offline mode permission not enforced
Description
Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline.
Mesures correctives et solutions de contournement
Upgrade to Devolutions Workspace 2023.3.0 or higher.
Sévérité
2.3 Low - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/U:Green
Produits affectés
Devolutions Workspace 2023.3.2.0 and earlier
CVE(s)
CVE-2023-6588
