1. Bug Reports
  2. Bugs
0
Not a bug

HEAVY security issue

JamieZiggers 3 years ago • updated by Scott Linak 3 years ago • 2

Hello,

Once i copy something, it gets AUTO written to the guest into his clipboard.

If i'm copying my domain admin's credentials to check something in the server while i am connected, he can simply press CTRL+V to gain domain credentials.

This is a heavy security issue and should get patched ASAP.

ConnectWise Control Version:
1
Server Affected:
Host Client Affected:
Guest Client Affected:
OS:

                            
                            

                    

                
                

            
            
    


	
	


                    
    					
                    
	

	

	
	
    


  
  

  

  
    

    


      

        

      

    
      

        
      
          
    
    
    
    

    

  
  


  

  

    


    
    
    

    
    

    
    

    
    

    



    
    
    

    
    
    
    
    
    









   







	

        


    


	



		

		

			



  	
	



	
	
	
+1

	

    

	

	



	
	
	

	
	
	

		anonymous 3 years ago
    

	
Hi Jamie,

Clipboard sync is disabled when guest input is blocked. Also, there is a setting in the app.config called DisableClipboardCapture that may alleviate your concern. 
https://docs.connectwise.com/ConnectWise_Control_Documentation/On-premises/Advanced_setup/List_of_app.config_settingshttps://docs.connectwise.com/ConnectWise_Control_Documentation/Supported_extensions/Administration/Edit_App.Config_Settings

	











	





  	
	



	
	
	

	

    

	

	



	
	
	
 Answer

	
	

	
		

	        Not a bug
		

	
	
	

		Scott Linak 3 years ago
    

	

	











	


		


		

		
    	
 Commenting disabled

    	

		
		
		

		

	












          
          


          


          
          

            

              
Customer support service by UserEcho