Lucene search
+L

1555 matches found

Prion
Prion
•added 2022/06/15 5:15 p.m.•26 views

Default credentials

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

2.1CVSS5AI score0.00378EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/06/15 4:09 p.m.•108 views

CVE-2022-1342

CVE-2022-1342 affects Devolutions Remote Desktop Manager (pre- and including 2022.1.24). The root cause is a lack of password masking and a caching issue that can leave sensitive fields visible when panels are closed and reopened, enabling physically proximate attackers to observe data. The conne...

4.6CVSS4.8AI score0.00378EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/06/15 4:09 p.m.•43 views

CVE-2022-1342

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

5.2AI score0.00378EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/06/15 12:00 a.m.•16 views

Devolutions Remote Desktop Manager 安全漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2022.1.24 and prior versions, which stems from a lack of password masking and a caching...

4.6CVSS5.3AI score0.00378EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/15 12:00 a.m.•5 views

CVE-2022-1342: Missing Password Field Masking

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive...

4.6CVSS5.5AI score0.00378EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/03 3:15 a.m.•11 views

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

6.6CVSS6.6AI score0.00252EPSS
SaveExploits0References3
NVD
NVD
•added 2022/03/03 3:15 a.m.•32 views

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

6.6CVSS0.00252EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/03 3:15 a.m.•13 views

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

6.6CVSS5.8AI score0.00252EPSS
SaveExploits0References2
Prion
Prion
•added 2022/03/03 3:15 a.m.•26 views

Authentication flaw

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

4.6CVSS6.3AI score0.00252EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/03/03 2:07 a.m.•43 views

CVE-2022-23849

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

6.5AI score0.00252EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/03 2:07 a.m.•129 views

CVE-2022-23849

The CVE-2022-23849 affects Devolutions Password Hub for iOS prior to 2021.3.4. A biometric lock authentication bypass allows an attacker to access the app by rapidly issuing failed biometric attempts. Impact is the ability to access the application with partial confidentiality/ integrity/availabi...

6.6CVSS6.2AI score0.00252EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/03/03 12:00 a.m.•18 views

Devolutions Password Hub 授权问题漏洞

Devolutions Password Hub is a highly secure, flexible and easy-to-use cloud-based password management solution from Devolutions Canada. A security vulnerability exists in Devolutions Password Hub for iOS versions prior to 2021.3.4, which can be exploited by an attacker to gain access to an...

6.6CVSS6.7AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/03 12:00 a.m.•4 views

CVE-2022-23849: Undefined Security Weakness

The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...

6.6CVSS6.7AI score0.00252EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/18 2:15 p.m.•21 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS0.01757EPSS
SaveExploits0References2
OSV
OSV
•added 2021/10/18 2:15 p.m.•15 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS7.3AI score0.01757EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/18 2:15 p.m.•30 views

Design/Logic Flaw

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

6.5CVSS8.7AI score0.01757EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/10/18 2:15 p.m.•11 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS7.3AI score0.01757EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2021/10/18 1:22 p.m.•254 views

CVE-2021-42098

CVE-2021-42098 affects Devolutions Remote Desktop Manager; there is an incomplete permission check on entries prior to version 2021.2.16, allowing permission bypass via batch custom PowerShell. The available connected documents indicate the issue stems from improper access control rather than a v...

8.8CVSS8.7AI score0.01757EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/10/18 1:22 p.m.•34 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

9AI score0.01757EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•14 views

Devolutions Remote Desktop Manager 安全漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager, which stems from incomplete permission checking of entries in the "Transfer Remote Desktop...

8.8CVSS8.1AI score0.01757EPSS
SaveExploits0References2
Rows per page
Query Builder