CVE-2023-1203

published 2023-03-10

CVE-2023-1203: Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and…

Priority P3 36 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
devolutions	remote_desktop_manager	< 2022.3.1.6	2022.3.1.6
devolutions	remote_desktop_manager_powershell_module	<= 2022.3.1.5	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200