The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypted password once a session has ended.
References
Link | Resource |
---|---|
http://thycotic.com/products/secret-server/resources/advisories/cve-2014-4861/ | Vendor Advisory |
Configurations
Information
Published : 2018-03-09 12:29
Updated : 2018-03-29 07:10
NVD link : CVE-2014-4861
Mitre link : CVE-2014-4861
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
thycotic
- secret_server