Lucene search

K
nvd[email protected]NVD:CVE-2023-6593
HistoryDec 12, 2023 - 3:15 p.m.

CVE-2023-6593

2023-12-1215:15:07
CWE-732
web.nvd.nist.gov
cve-2023-6593
permission bypass
devolutions remote desktop manager
ios
sql data source
attacker access

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

39.1%

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction.

Affected configurations

NVD
Node
devolutionsremote_desktop_managerRange<2023.3.5.0
AND
appleiphone_osMatch-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

39.1%

Related for NVD:CVE-2023-6593