CVE-2024-7421

Katalog CVE

CVSS 5.5 · Medium EPSS 0,15%

Kerentanan Insertion of Sensitive Information into Log File pada devolutions remote desktop manager. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions

Rincian

Terbit di NVD

25 September 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

0,15% peluang dieksploitasi; lebih tinggi dari 3,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://devolutions.net/security/advisories/DEVO-2024-0014 advisory vendor