CVE-2024-6055

—

CVSS 3.1

4.7 medium

EPSS

<1%p41

Published

Jun 17, 2024 (Jun 17, 2024)

Modified

Jun 17, 2026

Description

Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration file.

Vendors: devolutions
Products: remote desktop manager
Weakness: CWE-212
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.