medium4.3
CVE-2023-1939
No access control for the OTP key on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux …
Impact
No access control for the OTP key on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | through 2022.3.2.0 through 2022.3.33.0 |