CVE-2023-1939

No access control for the OTP key on OTP entries

Medium · published April 11, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
33.5
In the wild
Unconfirmed
What it is

No access control for the OTP key

on OTP entries

in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00404 · 33.5th percentile
Published
2023-04-11T17:47Z
EPSS history
Timeline
  • 11 APR 17:47Z
    No access control for the OTP key on OTP entries
    cvelistv5