Lucene search
MitreCVELIST:CVE-2022-26964HistoryDec 26, 2022 - 12:00 a.m.
CVE-2022-26964
2022-12-2600:00:00
mitre
www.cve.org
2
weak password
devolutions remote desktop manager
information disclosure
password brute-force attack
base64 decoded
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
7.5
Confidence
High
EPSS
0.002
Percentile
51.6%
Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded.
Related
nvd
nvd
CVE-2022-26964
2022-12-26 06:15:10
cve
cve
CVE-2022-26964
2022-12-26 06:15:10
prion
prion
Information disclosure
2022-12-26 06:15:00
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
7.5
Confidence
High
EPSS
0.002
Percentile
51.6%
Related for CVELIST:CVE-2022-26964