Information Disclosure Vulnerability in Rocket Remote Desktop

Rocket Remote Desktop is susceptible to a security vulnerability (CVE-2024-5178) that enables unauthorized parties to access sensitive information. An attacker can exploit this flaw to retrieve credentials stored within the application's configuration files. This exposure can lead to the compromise of remote access sessions and persistent unauthorized access to managed infrastructure. The vulnerability affects Rocket Remote Desktop versions prior to 2024.3.0.25206. Organizations utilizing this software for remote management should prioritize patching to the latest version to prevent the unauthorized extraction of saved connection secrets.

Impact

Successful exploitation allows an attacker to gain unauthorized access to credentials stored by Rocket Remote Desktop. This potentially impacts all sectors relying on the software for remote server management. Exposure of these credentials can facilitate lateral movement, privilege escalation, and full control over the remote systems managed by the compromised client, creating a significant risk to the security of the host environment.

Recommendation

• Update Rocket Remote Desktop to version 2024.3.0.25206 or later immediately.
• Review access logs and configuration file modification timestamps for unauthorized access to the application data directory.
• Rotate any credentials previously stored within Rocket Remote Desktop if unauthorized access to the system is suspected.