Incorrect permission assignment in temporary access requests component poses elevated privileges risk
CVE-2024-12149

Currently unrated

Key Information:

Vendor

Devolutions

Status
Remote Desktop Manager
Vendor
CVE Published:
4 December 2024

What is CVE-2024-12149?

Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an authenticated user that request temporary permissions on an entry to obtain more privileges than requested.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Remote Desktop Manager Windows 0 <= 2024.3.19.0

References

https://devolutions.net/security/advisories/DEVO-2024-0017

Timeline

  • Vulnerability published

JSON
.