CVE-2024-6057: Critical severity Devolutions Remote Desktop Manager vulnerability
Published Jun 17, 2024
·Updated
Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM instance to bypass the vault master password via the offline mode feature.
Affected Software
3 affected components
Devolutions Remote Desktop Manager<=2024.1.31.0
Devolutions Remote Desktop Manager Windows<2024.1.32.0
Devolutions Remote Desktop Manager Windows<2024.1.32.0
Event History
Jun 17, 2024
CVE Published
via MITRE·01:10 PM
Data Sourced
via MITRE·01:10 PM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-6057?
CVE-2024-6057 has been rated as critical due to its potential to allow unauthorized access to sensitive information.
2
How do I fix CVE-2024-6057?
To fix CVE-2024-6057, upgrade to Devolutions Remote Desktop Manager version 2024.1.32.0 or later.
3
What systems are affected by CVE-2024-6057?
CVE-2024-6057 affects Devolutions Remote Desktop Manager versions 2024.1.31.0 and earlier.
4
What type of vulnerability is CVE-2024-6057?
CVE-2024-6057 is classified as an improper authentication vulnerability.
5
What is the exploit mechanism for CVE-2024-6057?
CVE-2024-6057 allows attackers to bypass the vault master password using the offline mode feature.