Portail
Forum
Devolutions Force
Hub Business
Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Sécurité et conformité
DEVO-2022-0002
Résumé
A vulnerability can reduce the strength of some passwords when exporting data in Remote Desktop Manager.
Produits affectés
Remote Desktop Manager 2021.2 and earlier
Journal des modifications
Initial Publication - 2022-03-09
Sévérité
High
Produit
Remote Destkop Manager
Version corrigée
2022.1
Weak password derivation on vault export
Description
When exporting data out of Remote Desktop Manager, a password can be used to encrypt the file. For passwords that were also valid Base64, Remote Desktop Manager erroneously decoded them prior to password derivation which reduces the effective length of the password.
Mesures correctives et solutions de contournement
Update to Remote Desktop Manager 2022.1 or higher.
Sévérité
High - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Produits affectés
Remote Desktop Manager
CVE(s)
CVE-2022-26964
