Portal 
Forum 
Devolutions Force 
Devolutions Hub Business 
Devolutions Hub Personal 
Devolutions Send 
Devolutions Academy 
RDM 
Workspace 
Launcher 
Sicherheit & Regelkonformität
Wir halten die höchsten Standards ein, um Ihre Daten zu schützen und Vertrauen zu gewährleisten.
DEVO-2021-0005
A vulnerability was fixed were private key were returned unencrypted by the connections/partial endpoint.
Betroffene Produkte
2020.3.20 (LTS) and earlier.
Änderungsprotokoll
Initial Publication - 2021-06-30 Added CVE - 2021-07-13
Low - CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Private key returned unencrypted in connections/partial endpoint (CVE-2021-36382)
Private keys are returned by the connections/partial endpoint without being encrypted. This could lead to data exposure for installations that do not have TLS enabled.
Betroffene Produkte
CVE(s)
CVE-2021-36382
Behebungen und Workarounds
Update to Devolutions Server 2021.1.18 or higher.
Update to Devolutions Server LTS 2020.3.21 or higher.
This issue is completely mitigated when Devolutions Server is configured to use TLS. The confidentiality of private keys can also be protected by setting a strong password on them.
