VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026

CVE-2023-1939

CVE-2023-1939

Description

No access control for the OTP key

on OTP entries

in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Devolutions/Remote Desktop Manager4 versions
    cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:linux:*:*+ 3 more
    • cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:linux:*:*range: <=2022.3.2.0
    • cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*range: <=2022.3.33.0
    • (no CPE)range: <=2022.3.33.0
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.