Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-1939 EUVD-2023-24126GHSA-qgvh-g2mh-jwfc

No access control for the OTP key on OTP entries

Published Apr 11, 2023 · Updated Feb 10, 2025 · Assigned by DEVOLUTIONS

Description

No access control for the OTP key 

 on OTP entries

in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

Affected products

VendorProductAffectedFixed
Devolutions Remote Desktop Manager < 2022.3.34.0, < 2022.3.2.1 2022.3.34.0

References