← CVE Intelligence

CVE-2023-1939

No access control for the OTP key on OTP entries PUBLISHED

Description (CNA)

No access control for the OTP key   on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

Affected (CNA)

Vendor / productVersions
Devolutions / Remote Desktop Manageraffected 0 before 2022.3.34.0
Devolutions / Remote Desktop Manageraffected 0 before 2022.3.2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.