CVE-2023-1574

State: Published
Severity: 6.5 Medium
Published: Mar 22, 2023
Updated: Feb 25, 2025
Reserved: Mar 22, 2023

Description

Information disclosure in the user creation feature of a MSSQL data source in Devolutions Remote Desktop Manager 2023.1.9 and below on Windows allows an attacker with access to the user interface to obtain sensitive information via the error message dialog that displays the password in clear text.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-522 Insufficiently Protected Credentials

Affected Products

Product	Versions
Remote Desktop ManagerDevolutions	2023.1.9 and earlierAffected

References

https://devolutions.net/security/advisories/DEVO-2023-0006

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.