Lucene search

DEVOLUTIONSCVE-2023-1203

HistoryMar 10, 2023 - 9:15 p.m.

CVE-2023-1203

2023-03-1021:15:14

DEVOLUTIONS

web.nvd.nist.gov

cve-2023-1203

devolutions remote desktop manager

hub business

powershell module

information security

data protection

authentication

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

29.2%

JSON

Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule.

Affected configurations

Nvd

Node

devolutionsremote_desktop_managerRange<2022.3.1.6

VendorProductVersionCPE
devolutionsremote_desktop_manager*cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
devolutions	remote_desktop_manager	*	cpe:2.3:a:devolutions:remote_desktop_manager::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Hub Business submodule"
    ],
    "product": "Remote Desktop Manager PowerShell Module",
    "vendor": "Devolutions",
    "versions": [
      {
        "lessThanOrEqual": "2022.3.1.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

devolutions.net/security/advisories/DEVO-2023-0004

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

29.2%

JSON

Related for CVE-2023-1203