CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-1980
https://notcve.org/view.php?id=CVE-2023-1980
Two factor authentication bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to cancel the two factor authentication via the application user interface and open entries. • https://devolutions.net/security/advisories/DEVO-2023-0009 •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-1202
https://notcve.org/view.php?id=CVE-2023-1202
Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision. • https://devolutions.net/security/advisories/DEVO-2023-0008 • CWE-863: Incorrect Authorization •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-1574
https://notcve.org/view.php?id=CVE-2023-1574
Information disclosure in the user creation feature of a MSSQL data source in Devolutions Remote Desktop Manager 2023.1.9 and below on Windows allows an attacker with access to the user interface to obtain sensitive information via the error message dialog that displays the password in clear text. • https://devolutions.net/security/advisories/DEVO-2023-0006 • CWE-522: Insufficiently Protected Credentials •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-1203
https://notcve.org/view.php?id=CVE-2023-1203
Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule. • https://devolutions.net/security/advisories/DEVO-2023-0004 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-26964
https://notcve.org/view.php?id=CVE-2022-26964
Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded. La derivación de contraseña débil para exportar en Devolutions Remote Desktop Manager antes de 2022.1 permite la divulgación de información mediante un ataque de fuerza bruta de contraseña. Un error provocó que se decodificara base64. • https://devolutions.net/security/advisories/DEVO-2022-0002 • CWE-307: Improper Restriction of Excessive Authentication Attempts •