CVE-2023-6588

Published: Dec 7, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline.

Affected (1)

Products: Devolutions: Workspace

Devolutions

1 product

Workspace

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Devolutions Workspace	Up to 2023.3.2.0

References (2)

https://devolutions.net/security/advisories/DEVO-2023-0022/

Source: security@devolutions.net

Vendor Advisory

https://devolutions.net/security/advisories/DEVO-2023-0022/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.