| Package | Affected versions | Patched versions |
|---|---|---|
| devolutions server | < 2020.3.20< 2021.1.18 | 2020.3.202021.1.18 |
Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free