CVE-2014-4861

🗓️ 09 Mar 2018 20:00:29Reported by certccType

The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypted password once a session has ended

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2014-4861	9 Mar 201820:00	–	cvelist
NVD	CVE-2014-4861	9 Mar 201820:29	–	nvd
Prion	Default credentials	9 Mar 201820:29	–	prion
OpenVAS	Thycotic Secret Server Credentials Disclosure Vulnerability	10 Apr 201800:00	–	openvas
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities Have Been Identified In IBM Security Secret Server	24 Jan 202006:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on IBM Security Secret Server	1 Mar 202214:02	–	ibm

Nvd

Node

thycotic secret_serverRange7.5.000000–8.6.000009

Source	Link
thycotic	www.thycotic.com/products/secret-server/resources/advisories/cve-2014-4861/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Mar 2018 20:29Current

9.5High risk

Vulners AI Score9.5

CVSS27.5

CVSS39.8

EPSS0.002

CWE-255