Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-1939

No access control for the OTP key on OTP entries

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
DEVOLUTIONS

Description

No access control for the OTP key   on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Devolutions Remote Desktop Manager

Default version status: unaffected

  • 0 to < 2022.3.34.0affected

Devolutions Remote Desktop Manager

Default version status: unaffected

  • 0 to < 2022.3.2.1affected

References