CVE Daily

CVE-2022-26964

Weak password derivation for export in Devolutions Remote Desktop Manager before...

High CVSS 7.4

Overview

Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded.

CWE: CWE-307 Published: 2022-12-26T06:15:10.797
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.4 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags