CVE-2021-42098: High severity remote desktop manager vulnerability
Published Oct 18, 2021
·Updated
An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.
Affected Software
1 affected component
Devolutions Remote Desktop Manager<2021.2.16
Event History
Oct 18, 2021
CVE Published
via MITRE·01:22 PM
Data Sourced
via MITRE·01:22 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-42098?
The severity of CVE-2021-42098 is high, with a CVSS score of 8.8.
2
How does CVE-2021-42098 affect Devolutions Remote Desktop Manager?
CVE-2021-42098 allows attackers to bypass permissions in Devolutions Remote Desktop Manager before version 2021.2.16.
3
What is the affected software for CVE-2021-42098?
The affected software for CVE-2021-42098 is Devolutions Remote Desktop Manager before version 2021.2.16.
4
How can attackers exploit CVE-2021-42098?
Attackers can exploit CVE-2021-42098 by using batch custom PowerShell to bypass permissions in Devolutions Remote Desktop Manager before version 2021.2.16.
5
Is there a fix available for CVE-2021-42098?
Yes, the fix for CVE-2021-42098 is to update Devolutions Remote Desktop Manager to version 2021.2.16 or later.