Devolutions: >> Workspace >> 2022.4.1.4 Security Vulnerabilities
Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions
CVSS Score
6.3
EPSS Score
0.001
Published
2024-03-07
Offline mode is always enabled, even if permission disallows it, in
Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and
earlier. This allows an attacker with access to the Workspace
application to access credentials when offline.
CVSS Score
6.5
EPSS Score
0.003
Published
2023-12-07