CVE-2023-6588 Information

Description

Offline mode is always enabled even if permission disallows it in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline.

Reference

https://devolutions.net/security/advisories/DEVO-2023-0022/

Share on: