PT-2023-16818 · Devolutions · Devolutions Remote Desktop Manager Powershell Module

CVE-2023-1203 · Publicado 2023-03-06 · Atualizado 2023-03-15

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager PowerShell Module versions 2022.3.1.5 and earlier

Description The issue is related to the improper removal of sensitive data in the entry edit feature of the Hub Business submodule. This allows an authenticated user to access sensitive data on entries that were edited using the affected submodule.

Recommendations For versions 2022.3.1.5 and earlier, update to a version that contains a fix for this issue to prevent unauthorized access to sensitive data.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-1203

Produtos afetados

Devolutions Remote Desktop Manager Powershell Module

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-1203 · Nota de Segurança
• https://devolutions.net/security/advisories/DEVO-2023-0004 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-1203 · Aviso do Fabricante