CVE-2023-7047

published 2023-12-21

CVE-2023-7047: Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31…

Priority P4 21 medium 4.4 CVSS 3.1

AV L AC L PR L UI N S U C L I L A N

Inadequate validation of permissions when employing remote tools and
macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and
earlier permits a user to initiate a connection without proper execution
rights via the remote tools feature. This affects only SQL data sources.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
devolutions	remote_desktop_manager	<= 2023.3.31.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-863