2 lines
2.8 KiB
JSON
2 lines
2.8 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Remote Desktop Manager","vendor":"Devolutions","versions":[{"lessThanOrEqual":"2024.3.29.0","status":"affected","version":"0","versionType":"custom"}]}],"source":"security@devolutions.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*","matchCriteriaId":"0C146019-3232-4413-BB31-AC876E37BFE5","versionEndExcluding":"2024.3.31.0","vulnerable":true},{"criteria":"cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*","matchCriteriaId":"183673B7-2357-4FA7-98E7-32F986B65BC3","versionEndExcluding":"2024.3.31.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authenticated user to inadvertently leak the My Personal Credentials in a shared vault via the clear history feature due to faulty business logic."},{"lang":"es","value":"La exposición de información confidencial en el componente de historial de contraseñas de mis credenciales personales en Devolutions Remote Desktop Manager 2024.3.29 y versiones anteriores en Windows permite que un usuario autenticado filtre inadvertidamente Mis credenciales personales en una bóveda compartida a través de la función de borrar historial debido a una lógica comercial defectuosa."}],"id":"CVE-2025-1636","lastModified":"2026-06-17T08:39:30.487","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1636","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-03-18T16:20:46.578469Z","version":"2.0.3"}}]},"published":"2025-03-13T13:15:46.970","references":[{"source":"security@devolutions.net","tags":["Vendor Advisory"],"url":"https://devolutions.net/security/advisories/DEVO-2025-0004/"}],"sourceIdentifier":"security@devolutions.net","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"security@devolutions.net","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|