CVE-2024-7421

—

CVSS 3.1

5.5 medium

EPSS

<1%p5

Published

Sep 25, 2024 (Sep 25, 2024)

Modified

Jun 17, 2026

Description

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions

Vendors: devolutions
Products: remote desktop manager
Weakness: CWE-532
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.