CVE-2023-7047 | BDVDB-2026-220147 Detail

DevolutionsRemote Desktop Manager

Description#

Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. This affects only SQL data sources.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-863 Incorrect Authorization

References#

https://devolutions.net/security/advisories/DEVO-2023-0024/

Exploit#

No public exploit known

History#

Version 12023-12-21Record published in the CVE List.
Version 22024-10-29Most recent update recorded in the CVE List.