Vulnerability Database

299,038

Total vulnerabilities in the database

CVE-2023-1939

No access control for the OTP key 

 on OTP entries

in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

  • Published: Apr 11, 2023
  • Updated: Apr 22, 2023
  • CVE: CVE-2023-1939
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
devolutions / remote_desktop_manager - 2022.3.2.0.x
devolutions / remote_desktop_manager - 2022.3.33.0.x