Authentication Bypass in Hub Business Integration for Devolutions Workspace on Windows and macOS

CVE-2023-2257

What is CVE-2023-2257?

This security issue allows an attacker with access to the user interface to bypass password protection on a Hub Business space within Devolutions Workspace. Specifically, if the 'Force Login' feature is activated, the vulnerability enables unauthorized users to unlock the workspace application without entering the required credentials. This poses a significant risk to data integrity and security within the application.

References