CVE-2024-7421

Description

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions

Reserved 2024-08-02 | Published 2024-09-25 | Updated 2024-09-25 | Assigner DEVOLUTIONS

Problem types

CWE-532: Information Exposure Through Log Files

Product status

Default status
unaffected

Any version
affected

References

devolutions.net/security/advisories/DEVO-2024-0014

cve.org (CVE-2024-7421)

nvd.nist.gov (CVE-2024-7421)

Download JSON