Description
Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration file.
Metrics
CVSS 3.1 4.7/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:LWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Jun 17, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed