Vulnerability Description
An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | < 2021.2.16 |
Related Weaknesses (CWE)
References
- https://devolutions.netVendor Advisory
- https://devolutions.net/security/advisories/DEVO-2021-0006Vendor Advisory
- https://devolutions.netVendor Advisory
- https://devolutions.net/security/advisories/DEVO-2021-0006Vendor Advisory
FAQ
What is CVE-2021-42098?
CVE-2021-42098 is a vulnerability with a CVSS score of 8.8 (HIGH). An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.
How severe is CVE-2021-42098?
CVE-2021-42098 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-42098?
Check the references section above for vendor advisories and patch information. Affected products include: Devolutions Remote Desktop Manager.