New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2024-11671

NVDCIRCLENISA

EUVD-2024-33948 · Published Nov 25, 2024

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.

Technologies

Devolutions Remote Desktop Manager

Weaknesses

CWE-287

CVSS scores

  • v3.15.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot