Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.7

Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported setting...

CVE-2024-6055 · published 2 years ago
Summary

Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration file.

What to do
  • Update devolutions remote_desktop_manager to version 2024.2.8.0 or later.
Affected software
VendorProductAffected versions
devolutions remote_desktop_manager < 2024.2.8.0
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*
Original advisory text
Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported setting...
Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration file.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.7 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-212Improper Removal of Sensitive Information Before Storage or Transfer
Timeline
Published17 Jun 2024
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2024-6055 · NVD
Track software like this
Free during beta