{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3arocketsoftwarerocket_remote_desktop/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:rocketsoftware:rocket_remote_desktop:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":4.9,"id":"CVE-2024-5178"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Rocket Remote Desktop (\u003c 2024.3.0.25206)"],"_cs_severities":["low"],"_cs_tags":["vulnerability","credential-access"],"_cs_type":"advisory","_cs_vendors":["Rocket Software"],"content_html":"\u003cp\u003eRocket Remote Desktop is susceptible to a security vulnerability (CVE-2024-5178) that enables unauthorized parties to access sensitive information. An attacker can exploit this flaw to retrieve credentials stored within the application's configuration files. This exposure can lead to the compromise of remote access sessions and persistent unauthorized access to managed infrastructure. The vulnerability affects Rocket Remote Desktop versions prior to 2024.3.0.25206. Organizations utilizing this software for remote management should prioritize patching to the latest version to prevent the unauthorized extraction of saved connection secrets.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an attacker to gain unauthorized access to credentials stored by Rocket Remote Desktop. This potentially impacts all sectors relying on the software for remote server management. Exposure of these credentials can facilitate lateral movement, privilege escalation, and full control over the remote systems managed by the compromised client, creating a significant risk to the security of the host environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate Rocket Remote Desktop to version 2024.3.0.25206 or later immediately.\u003c/li\u003e\n\u003cli\u003eReview access logs and configuration file modification timestamps for unauthorized access to the application data directory.\u003c/li\u003e\n\u003cli\u003eRotate any credentials previously stored within Rocket Remote Desktop if unauthorized access to the system is suspected.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T11:38:30Z","date_published":"2026-10-12T11:38:30Z","id":"https://feed.craftedsignal.io/briefs/2026-10-rocket-remote-desktop-info-disclosure/","summary":"Rocket Remote Desktop contains a vulnerability that allows an attacker to disclose sensitive information, specifically credentials stored within configuration files.","title":"Information Disclosure Vulnerability in Rocket Remote Desktop","url":"https://feed.craftedsignal.io/briefs/2026-10-rocket-remote-desktop-info-disclosure/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:rocketsoftware:rocket_remote_desktop:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}