CVE-2023-6588
Medium
Published: 07 December 2023
Published
07 December 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.0025
48.8th percentile
Risk Priority
13
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-6588 is a medium-severity an unspecified weakness vulnerability in Devolutions Workspace. Its CVSS base score is 6.5 (Medium).
Operationally, ranked at the 48.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-58812
Vulnerability details
Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with access to the Workspace application to access credentials when offline.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
devolutions
workspace
≤ 2023.3.2.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.