What is the CVSS score of CVE-2024-2241?

CVE-2024-2241 has a CVSS 3.1 base score of 6.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.4%.

Workspace CVE-2024-2241

MEDIUM

2024-03-07 security@devolutions.net

Information Disclosure Workspace

6.3

CVSS 3.1 · Vendor: devolutions

Severity by source

Vendor (devolutions) PRIMARY

6.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Primary rating from Vendor (devolutions) · only source for this CVE.

CVSS VectorVendor: devolutions

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

CVE Published

Mar 07, 2024 - 13:15 cve.org

MEDIUM 6.3

DescriptionCVE.org

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions

AnalysisAI

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Workspace

View all

CVE-2019-11634 CRITICAL Act Now

9.8 May 22

Citrix Workspace App before 1904 for Windows has Incorrect Access Control. Rated critical severity (CVSS 9.8), this vuln

CVE-2020-8207 HIGH This Week

8.8 Jul 24

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code exe

CVE-2024-6286 HIGH This Week

8.5 Jul 10

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows. R

CVE-2025-4879 HIGH This Week

7.8 Jun 17

Local privilege escalation vulnerability in Citrix Workspace app for Windows that allows low-privileged users to gain SY

CVE-2023-2257 HIGH This Week

7.8 Apr 24

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and

CVE-2023-24485 HIGH This Week

7.8 Feb 16

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM o

CVE-2021-22907 HIGH This Week

7.8 May 27

An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalat

CVE-2024-42423 HIGH This Week

7.1 Sep 10

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citr

CVE-2024-7889 HIGH This Week

7.0 Sep 11

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows. R

CVE-2023-6588 MEDIUM This Month

6.5 Dec 07

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Worksp

CVE-2023-24486 MEDIUM This Month

5.5 Jul 10

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious loca

CVE-2023-24484 MEDIUM This Month

5.5 Feb 16

A malicious user can cause log files to be written to a directory that they do not have permission to write to. Rated me

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2024-2241 vulnerability details – vuln.today

Back