CVE-2024-7421 Information disclosure in Remote Desktop Manager
Local attackers can read session credentials from system logs due to passwords being exposed in command-line arguments during WinSCP launches.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-7421?
CVE-2024-7421 is a medium-severity vulnerability in Devolutions Remote Desktop Manager, published on 25 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions
Weakness: CWE-532
Which versions are affected by CVE-2024-7421?
It affects 1 product.
Products include Devolutions Remote Desktop Manager.
How do I fix CVE-2024-7421?
No fix has been published for CVE-2024-7421 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-7421 being exploited?
There is no known exploitation of CVE-2024-7421 in the wild and no public exploit code.
Other vulnerabilities in Devolutions Remote Desktop Manager
- CVE-2026-2590 Security feature bypass in Remote Desktop Manager
- CVE-2024-6057 Auth bypass in Remote Desktop Manager
- CVE-2023-6593 Missing authorization in Remote Desktop Manager
- CVE-2023-5765 Missing authorization in Remote Desktop Manager
- CVE-2023-4373 Missing authorization in Remote Desktop Manager
Sources
Also known as GHSA-p5fp-56mj-rxm3.