Описание
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2026.2.9.0 (исключая)
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:windows:*:*
EPSS
Процентиль: 4%
0.00147
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-297
Связанные уязвимости
CVSS3: 5.5
github
3 месяца назад
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.
EPSS
Процентиль: 4%
0.00147
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-297