CVE-2022-26964

Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack

High · published December 26, 2022

CVSS v3.1
7.4
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00474 · 40.0th percentile
Published
2022-12-26T00:00Z
EPSS history
Timeline
  • 26 DEC 00:00Z
    Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack
    cvelistv5