Sécurité et conformité

Avis Signaler un problème de sécurité Centre de confiance

DEVO-2023-0023

Résumé

Remote Desktop Manager iOS is affected by a vulnerability.

Produits affectés

Remote Desktop Manager iOS 2023.3.4.0 and earlier

Journal des modifications

2023-12-12 - Initial publication

Sévérité

Low

Produit

Remote Desktop Manager iOS

Version corrigée

2023.3.5.0

Client side permission bypass in Remote Desktop Manager iOS

Description

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction.

Mesures correctives et solutions de contournement

Upgrade to Remote Desktop Manager iOS 2023.3.5.0 or higher

Sévérité

2.0 Low - CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/U:Green

Produits affectés

Remote Desktop Manager iOS 2023.3.4.0 and earlier

CVE(s)

CVE-2023-6593