Insecure Temporary File Handling in Thycotic Secret Server Remote Desktop Launcher

Insecure Temporary File Handling in Thycotic Secret Server Remote Desktop Launcher

CVE-2014-4861 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypted password once a session has ended.

Learn more about our Cis Benchmark Audit For Desktop Software.