{
  "cveId": "CVE-2023-1939",
  "url": "https://patchblox.com/security/cve/CVE-2023-1939",
  "summary": "CVE-2023-1939 is fixed in Remote Desktop Manager on 1 platform by Remote Desktop Manager 2022.3.35.0 (version 2022.3.35.0), released February 14, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "No access control for the OTP key on OTP entries",
  "description": "No access control for the OTP key\u00A0\n\n\u00A0on OTP entries\n\n in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.",
  "published": "2023-04-11T18:15:58Z",
  "severity": "",
  "cvss": 4.3,
  "cwe": "CWE-732: Incorrect Permission Assignment for Critical Resource",
  "epss": 0.00404,
  "epssPercentile": 0.34922,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2023-1939",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Remote Desktop Manager",
      "fixedVersion": "2022.3.35.0",
      "fix": "Remote Desktop Manager 2022.3.35.0",
      "url": "https://patchblox.com/security/fix/windows-app/devolutions.remotedesktopmanager-2022.3.35.0",
      "released": "2023-02-14T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}