Insecure Access Control for OTP Keys in Devolutions Remote Desktop Manager

Insecure Access Control for OTP Keys in Devolutions Remote Desktop Manager

CVE-2023-1939 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

No access control for the OTP key   on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

Learn more about our Cis Benchmark Audit For Desktop Software.