CVE-2024-7421
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Summary
An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Devolutions | Remote Desktop Manager | 0 <= 2024.2.20 | affected |
Weaknesses
- CWE-532: CWE-532: Information Exposure Through Log Files
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.