VULNERABILITY INTELLIGENCE

CVE-2024-6055

CVSS score4.7 MEDIUM
EPSS probability0.50%
CISA KEVNot currently listed
Published2024-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Description

Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration file.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-212

Primary references