1. Home
  2. CVE Database
  3. CVE-2024-7421
MEDIUM · 5.5

CVE-2024-7421

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included ...

Vulnerability Description

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DevolutionsRemote Desktop Manager< 2024.3.10

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2024-7421?

CVE-2024-7421 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included ...

How severe is CVE-2024-7421?

CVE-2024-7421 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-7421?

Check the references section above for vendor advisories and patch information. Affected products include: Devolutions Remote Desktop Manager.