CVE-2023-1203: Infoleak
Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-1203.
What is the title of this vulnerability?
The title of this vulnerability is 'Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolution…'.
What is the severity of CVE-2023-1203?
The severity of CVE-2023-1203 is medium with a CVSS score of 6.5.
Which software versions are affected by CVE-2023-1203?
The versions affected by CVE-2023-1203 are Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier (up to exclusive version 2022.3.1.6).
How can an authenticated user exploit this vulnerability?
An authenticated user can exploit this vulnerability to access sensitive data on entries that were edited using the affected Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module.