Vulnerabilities > CVE-2022-26964 - Improper Restriction of Excessive Authentication Attempts vulnerability in Devolutions Remote Desktop Manager

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
devolutions
CWE-307
NVD
Published: 2022-12-26
Updated: 2023-01-05

Summary

Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded.

Vulnerable Configurations

Part Description Count
Application
Devolutions
124

Common Weakness Enumeration (CWE)

References