CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Microsoft. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-1900
Severity
MEDIUM
CVSS
5.5
EPSS
0.23%
Microsoft
Original NVD Description
Improper session management in the identity provider authentication flow in Devolutions Server 2023.3.14.0 and earlier allows an authenticated user via an identity provider to stay authenticated after his user is disabled or deleted in the identity provider such as Okta or Microsoft O365. The user will stay authenticated until the Devolutions Server token expiration.
Related CVEs
Other vulnerabilities affecting the same vendor(s)