CVE-2024-6055

Published: Jun 17, 2024Modified: Jun 17, 2026

4.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Exploitability: 1.2 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration file.

Affected (2)

Products: Devolutions: Remote Desktop Manager

1 product

Remote Desktop Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Devolutions Remote Desktop Manager	Before 2024.2.8.0
Devolutions Remote Desktop Manager	Before 2024.2.8.0

Related CWEs

Improper Removal of Sensitive Information Before Storage or Transfer

The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.

References (2)

https://devolutions.net/security/advisories/DEVO-2024-0008

Source: security@devolutions.net

Vendor Advisory

https://devolutions.net/security/advisories/DEVO-2024-0008

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.