Lucene search
HistoryDec 26, 2022 - 6:15 a.m.
CVE-2022-26964
weak password
devolutions
information disclosure
brute-force attack
base64 decoding
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
50.6%
Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded.
Affected configurations
Node
devolutionsremote_desktop_managerRange<2022.1
Related
cve
cve
CVE-2022-26964
2022-12-26 06:15:10
prion
prion
Information disclosure
2022-12-26 06:15:00
cvelist
cvelist
CVE-2022-26964
2022-12-26 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
50.6%
Related for NVD:CVE-2022-26964