CVE-2023-1939

No access control for the OTP key   on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

Score

CVSS 3.1 4.3 Medium

Status

Modified - security@devolutions.net

Published

2023-04-11

Last modified

2025-02-10

Weaknesses

CWE-732

Affected products

• Remote Desktop Manager (Devolutions)

References

• https://devolutions.net/security/advisories/DEVO-2023-0009