Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-7421 EUVD-2024-48346GHSA-p5fp-56mj-rxm3

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to syst…

Published Sep 25, 2024 · Updated Mar 17, 2025 · Assigned by DEVOLUTIONS

Description

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions

Affected products

VendorProductAffectedFixed
Devolutions Remote Desktop Manager ≤ 2024.2.20 —

References