CVE-2024-6057

—

CVSS 3.1

9.8 critical

EPSS

<1%p58

Published

Jun 17, 2024 (Jun 17, 2024)

Modified

Jun 17, 2026

Description

Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM instance to bypass the vault master password via the offline mode feature.

Vendors: devolutions
Products: remote desktop manager
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.