CVE Feed

    Dashboard / CVE / CVE-2023-1939

    CVE-2023-1939

    No access control for the OTP key   on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

    Published:Apr 11, 2023
    Last Modified:Feb 10, 2025
    EPS:Apr 11, 2023
    EPSS Score:0.0015
    CVSS Score:4.3

    Affected Products

    Vendor
    Devolutions
    Product
    Remote Desktop Manager

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-78417 (CVSS 4.3) — Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 202…
    CVE-2026-13372 (CVSS 7.2) — Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Ma…
    CVE-2026-12162 (CVSS 5.5) — Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 …
    CVE-2026-12161 (CVSS 8.8) — Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to cr…
    CVE-2026-2590 (CVSS 9.8) — Improper enforcement of the Disable password saving in vaults setting in the connection entry component in D…
    CVE-2026-0747 (CVSS 3.3) — Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Ma…
    CVE-2025-13683 (CVSS 6.5) — Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This i…
    CVE-2025-5334 (CVSS 7.5) — Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions …
    CVE-2025-2600 (CVSS 6.8) — Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an au…
    CVE-2025-2562 (CVSS 5.4) — Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an auth…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High