CVE-2023-7047

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2023.3.31 and earlier

Description The issue is related to inadequate validation of permissions when using remote tools and macros via the context menu. This allows a user to initiate a connection without proper execution rights via the remote tools feature, affecting only SQL data sources.

Recommendations For Devolutions Remote Desktop Manager versions 2023.3.31 and earlier, consider disabling the remote tools feature until a patch is available to prevent exploitation. Restrict access to the context menu to minimize the risk of unauthorized connections. Avoid using the remote tools feature for SQL data sources until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.