VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Nov 25, 2024· Updated Jun 17, 2026

CVE-2024-11671

CVE-2024-11671

Description

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Devolutions/Remote Desktop Manager4 versions
    cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*+ 3 more
    • cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*range: <2024.3.18.0
    • cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*range: <2024.3.18.0
    • (no CPE)range: <=2024.3.17
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.