🚨 Rocket Remote Desktop encrypts users' saved credentials with their Windows SIDs. Every user with access to a Windows client on which the client software is installed has access to the database, where these credentials are saved. No fix available yet.
www.redteam-pentesting.de/en/advisorie...
redteam-pentesting.de
RedTeam Pentesting - Insecure Storage and Weak Encryption of Credentials in Rocket Remote Desktop
Attackers with access to a computer with Rocket Remote Desktop can read the credentials of the global database. With these credentials, they can view and decrypt the saved credentials of all users who...
