Devolutions Remote Desktop Manager 2023.2.34.0

CPE Details

Devolutions Remote Desktop Manager 2023.2.34.0
devolutions
remote_desktop_manager
2023.2.34.0
2024-01-02
14h29 +00:00
2024-01-02
14h29 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:devolutions:remote_desktop_manager:2023.2.34.0:*:*:*:*:*:*:*

Informations

Vendor

devolutions

Product

remote_desktop_manager

Version

2023.2.34.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-7421 2024-09-25 15h12 +00:00 An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions
5.5
Moyen
CVE-2024-2403 2024-03-13 18h05 +00:00 Improper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024.1.12 and earlier on Windows allows an attacker that compromised a user endpoint, under specific circumstances, to access sensitive information via residual files in the temporary directory.
5.9
Moyen
CVE-2024-0589 2024-01-31 13h04 +00:00 Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry.
5.4
Moyen
CVE-2023-7047 2023-12-21 14h42 +00:00 Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. This affects only SQL data sources.
4.4
Moyen
CVE-2023-6593 2023-12-12 14h32 +00:00 Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction.
9.8
Critique
CVE-2023-6288 2023-12-06 13h49 +00:00 Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYLIB_INSERT_LIBRARIES environment variable.
7.8
Haute