CVE-2024-4846: Medium severity Devolutions Server vulnerability
Published Jun 25, 2024
·Updated
Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab.
Affected Software
2 affected components
Devolutions Server<2024.1.14.0
Devolutions Devolutions Server<2024.1.15.0
Event History
Jun 25, 2024
CVE Published
via MITRE·12:18 PM
Data Sourced
via MITRE·12:18 PM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-4846?
CVE-2024-4846 is considered a high-severity vulnerability due to the potential for unauthorized access.
2
How do I fix CVE-2024-4846?
To fix CVE-2024-4846, upgrade Devolutions Server to version 2024.1.15.0 or later.
3
Who is affected by CVE-2024-4846?
CVE-2024-4846 affects users of Devolutions Server versions 2024.1.14.0 and earlier.
4
What is the impact of CVE-2024-4846?
The impact of CVE-2024-4846 allows an authenticated attacker to bypass 2FA and authenticate as another user.
5
Is there a patch available for CVE-2024-4846?
Yes, a patch is available in the form of an update to Devolutions Server version 2024.1.15.0 or later.