Devolutions: >> Remote Desktop Manager >> 2023.3.36.0 Security Vulnerabilities
An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions
CVSS Score
5.5
EPSS Score
0.0
Published
2024-09-25
Improper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024.1.12 and
earlier on Windows allows an attacker that compromised a user endpoint, under specific circumstances, to access sensitive information via residual files in the temporary directory.
CVSS Score
5.9
EPSS Score
0.002
Published
2024-03-13
Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry.
CVSS Score
5.4
EPSS Score
0.005
Published
2024-01-31