Sécurité et conformité
Nous respectons les normes les plus élevées pour protéger vos données et garantir la confiance.
DEVO-2022-0005
An arbitrary file write in entry attachments was fixed in Remote Desktop Manager 2022.2
Produits affectés
Journal des modifications
Initial Publication - 2022-06-21
Medium - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
Arbitrary file write via path traversal in entry attachments
Files can be attached to entries in Remote Desktop Manager. Special path characters were not being properly sanitized when constructing the destination path. An attacker could construct a path to write the file in an arbitrary directory when the file is opened.
Produits affectés
CVE(s)
CVE-2022-33995
Mesures correctives et solutions de contournement
Upgrade to Remote Desktop Manager 2022.2