CVE-2024-7421
Medium
Description
An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions
SeverityMedium
CVSS5.5
Exploit probability4. percentile0.2%
ProductDevolutions Remote Desktop Manager
PublishedSep 25, 2024
First seenSep 25, 2024
Weakness typeCWE-532CWE-532
How to fix
Update
- devolutions remote_desktop_manager2024.3.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| devolutions remote_desktop_manager | v < 2024.3.10 | 2024.3.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.