CVE-2024-6055: Medium severity Devolutions Remote Desktop Manager vulnerability
Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
On Windows, protect the exported settings/configuration file from unauthorized access (e.g., restrict file permissions/access to trusted users only) until updated, since an attacker could recover configured PowerShell credentials by stealing the configuration file.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6055?
CVE-2024-6055 is rated as a high-severity vulnerability due to the risk of exposing sensitive PowerShell credentials.
How do I fix CVE-2024-6055?
To mitigate CVE-2024-6055, upgrade to Devolutions Remote Desktop Manager version 2024.1.32.1 or later.
What causes CVE-2024-6055?
CVE-2024-6055 is caused by improper removal of sensitive information during the data source export feature.
Who is affected by CVE-2024-6055?
CVE-2024-6055 affects all users of Devolutions Remote Desktop Manager versions up to and including 2024.1.32.0.
What information can be compromised in CVE-2024-6055?
CVE-2024-6055 allows attackers to recover PowerShell credentials from exported settings if they gain access to the configuration file.