Devolutions Server prior to 2021.1.18, and LTS prior to 2020.3.20, allows malicious users to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
devolutions devolutions server |