Design/Logic Flaw

2023-12-1215:15:00

PRIOn knowledge base

www.prio-n.com

client-side

permission bypass

sql data source

ios

devolutions remote desktop manager

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.1%

JSON

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction.

CPENameOperatorVersion
remote_desktop_managerlt2023.3.5.0

CPE	Name	Operator	Version
	remote_desktop_manager	lt	2023.3.5.0

References

devolutions.net/security/advisories/DEVO-2023-0023/