CVE-2024-7421 - AskarLabs CVE Database

CVE-2024-7421

Vendor Devolutions

Product Remote Desktop Manager

Weakness CWE-532 · Sensitive info in logs

Published September 25, 2024

Last update March 17, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions

Key dates

02Disclosure timeline

September 25, 2024 CVE published

March 17, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-7421 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html

Related vulnerabilities

04Related CVE

CVE-2024-55891 Information Disclosure via Exception Handling/Logger in TYPO3 CVE-2025-66411 Coder logged sensitive objects unsanitized CVE-2026-41018 Apache Airflow Providers Elasticsearch: Elasticsearch task-log handler leaks credentials embedded in the host URL CVE-2024-37286 APM Server Insertion of Sensitive Information into Log File CVE-2026-4819 Search Guard audit logs can contain under certain conditions user credentials