description:
Offline mode is always enabled, even if permission disallows it, in
Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and
earlier. This allows an attacker with access to the Workspace
application to access credentials when offline.
affected:
{
defaultStatus: unaffected
modules: [Offline Mode, Devolutions Server Data Source]
product: Workspace
vendor: Devolutions
versions:
status: affected, version: 0
}