Attackers Can Bypass Vault Master Password via Offline Mode in Devolutions Remote Desktop Manager

CVE-2024-6057

What is CVE-2024-6057?

The improper authentication vulnerability in Devolutions Remote Desktop Manager allows attackers with access to an RDM instance to bypass the vault master password through the offline mode feature. This flaw poses significant security risks, enabling unauthorized access to sensitive data managed within the application. Users of Remote Desktop Manager versions 2024.1.31.0 and earlier are particularly at risk, necessitating prompt attention to remediate this issue.

References