CVE-2024-3545

Katalog CVE

CVSS 4.3 · Medium EPSS 0,28%

Kerentanan Improper Preservation of Permissions pada devolutions server, devolutions remote desktop manager. Skor CVSS 3.1 4.3 (Medium) menurut CISA ADP.

Deskripsi (NVD)

Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and earlier on windows and Devolutions Server 2024.1.8 and earlier allows an attacker to access sensitive informations contained in the offline cache file by gaining access to a computer where the software is installed even though the offline mode is disabled.

Rincian

Terbit di NVD

9 April 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber CISA ADP
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-281: Improper Preservation of Permissions

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 19,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://devolutions.net/security/advisories/DEVO-2024-0006 advisory vendor