CVE-2023-7047

State: Published
Severity: Not scored
Published: Dec 21, 2023
Updated: Oct 29, 2024
Reserved: Dec 21, 2023

Description

Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. This affects only SQL data sources.

Scores

The record has no CVSS score.

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
Remote Desktop ManagerDevolutions	2023.3.31 and earlierAffected

References

https://devolutions.net/security/advisories/DEVO-2023-0024/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.