CVE-2023-1939

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

No access control for the OTP key 

 on OTP entries

in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Apr 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-19409.1A vulnerability classified as critical was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This vulnerability affectsCVE-2023-19419.8A vulnerability, which was classified as critical, has been found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This issuCVE-2023-19429.8A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerabiCVE-2023-19438.8Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.CVE-2023-19447.8This vulnerability enables ssh access to minikube container using a default password.CVE-2023-19456.5Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerabilCVE-2023-19466.1A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. This issue affects some unknown proCVE-2023-19479.8A vulnerability was found in taoCMS 3.0.2. It has been classified as critical. Affected is an unknown function of the file /admin/admin.php.CVE-2023-19486.1A vulnerability, which was classified as problematic, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects sCVE-2023-19499.8A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown functCVE-2023-19509.8A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability CVE-2023-19519.8A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this issue is the f