Description
Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration file.
Published: 2024-06-17
Score: 4.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Mar 2025 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Devolutions
Devolutions remote Desktop Manager
CPEs cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*
Vendors & Products Devolutions
Devolutions remote Desktop Manager

Wed, 30 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-212
Metrics cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Devolutions Remote Desktop Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: DEVOLUTIONS

Published:

Updated: 2024-10-30T19:14:03.801Z

Reserved: 2024-06-17T12:41:04.564Z

Link: CVE-2024-6055

cve-icon Vulnrichment

Updated: 2024-08-01T21:25:03.279Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-17T13:15:53.697

Modified: 2025-03-28T16:23:27.830

Link: CVE-2024-6055

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses