Lucene search
+L

292 matches found

attackerkb
attackerkb
•added 2022/06/27 7:15 p.m.•6 views

CVE-2022-2221

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8...

6.5CVSS6.6AI score0.01343EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/06/27 7:15 p.m.•32 views

CVE-2022-2221

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8...

6.5CVSS0.01343EPSS
SaveExploits0References1
Prion
Prion
•added 2022/06/27 7:15 p.m.•34 views

Information disclosure

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8...

4CVSS6.3AI score0.01343EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/06/27 6:38 p.m.•105 views

CVE-2022-2221

CVE-2022-2221 concerns an Information Exposure vulnerability in the Devolutions Remote Desktop Manager product. The issue affects versions prior to 2022.1.8 and resides in the My Account Settings area, where authenticated users could access credentials of other users. The connected documents conf...

6.5CVSS6.3AI score0.01343EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/27 12:00 a.m.•4 views

CVE-2022-2221: Exposure of Sensitive Information to an Unauthorized Actor

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8...

6.5CVSS6.6AI score0.01343EPSS
SaveExploits0References3
NVD
NVD
•added 2022/06/21 3:15 p.m.•21 views

CVE-2022-33995

A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...

7.5CVSS0.01986EPSS
SaveExploits0References1
Prion
Prion
•added 2022/06/21 3:15 p.m.•20 views

Path traversal

A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...

5CVSS7.6AI score0.01986EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/06/21 2:37 p.m.•97 views

CVE-2022-33995

CVE-2022-33995 describes a path traversal in Devolutions Remote Desktop Manager (RDM) prior to version 2022.2, specifically in the handling of entry attachments. The root cause is a path traversal flaw that could allow an attacker to create or overwrite files in arbitrary locations on the affecte...

7.5CVSS7.6AI score0.01986EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/06/21 2:37 p.m.•30 views

CVE-2022-33995

A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...

7.8AI score0.01986EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/06/21 12:00 a.m.•13 views

Devolutions Remote Desktop Manager 路径遍历漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A path traversal vulnerability exists in Devolutions Remote Desktop Manager versions prior to 2022.2 that stems from a path traversal issue in the entry attachment. A...

7.5CVSS7.6AI score0.01986EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/21 12:00 a.m.•5 views

CVE-2022-33995: Improper Limitation of a Pathname to a Restricted Directory

A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location...

7.5CVSS7.4AI score0.01986EPSS
SaveExploits0References2
NVD
NVD
•added 2022/06/15 5:15 p.m.•31 views

CVE-2022-1342

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

4.6CVSS0.00378EPSS
SaveExploits0References1
Prion
Prion
•added 2022/06/15 5:15 p.m.•26 views

Default credentials

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

2.1CVSS5AI score0.00378EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/06/15 4:09 p.m.•108 views

CVE-2022-1342

CVE-2022-1342 affects Devolutions Remote Desktop Manager (pre- and including 2022.1.24). The root cause is a lack of password masking and a caching issue that can leave sensitive fields visible when panels are closed and reopened, enabling physically proximate attackers to observe data. The conne...

4.6CVSS4.8AI score0.00378EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/06/15 4:09 p.m.•43 views

CVE-2022-1342

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

5.2AI score0.00378EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/15 12:00 a.m.•5 views

CVE-2022-1342: Missing Password Field Masking

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

4.6CVSS5.5AI score0.00378EPSS
SaveExploits0References3
NVD
NVD
•added 2021/10/18 2:15 p.m.•21 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS0.01757EPSS
SaveExploits0References2
OSV
OSV
•added 2021/10/18 2:15 p.m.•14 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS7.3AI score0.01757EPSS
SaveExploits0References2
CVE
CVE
•added 2021/10/18 1:22 p.m.•254 views

CVE-2021-42098

CVE-2021-42098 affects Devolutions Remote Desktop Manager; there is an incomplete permission check on entries prior to version 2021.2.16, allowing permission bypass via batch custom PowerShell. The available connected documents indicate the issue stems from improper access control rather than a v...

8.8CVSS8.7AI score0.01757EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/10/18 1:22 p.m.•34 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

9AI score0.01757EPSS
SaveExploits0References2
Rows per page
Query Builder