1. Bug Reports
  2. Bugs
0
Not a bug

HEAVY security issue

JamieZiggers 3 years ago • updated by Scott Linak 3 years ago • 2

Hello,

Once i copy something, it gets AUTO written to the guest into his clipboard.

If i'm copying my domain admin's credentials to check something in the server while i am connected, he can simply press CTRL+V to gain domain credentials.

This is a heavy security issue and should get patched ASAP.

ConnectWise Control Version:
1
Server Affected:
Host Client Affected:
Guest Client Affected:
+1
anonymous 3 years ago

Hi Jamie,


Clipboard sync is disabled when guest input is blocked. Also, there is a setting in the app.config called DisableClipboardCapture that may alleviate your concern. 

https://docs.connectwise.com/ConnectWise_Control_Documentation/On-premises/Advanced_setup/List_of_app.config_settingshttps://docs.connectwise.com/ConnectWise_Control_Documentation/Supported_extensions/Administration/Edit_App.Config_Settings

Answer
Not a bug
Scott Linak 3 years ago
Commenting disabled

Customer support service by UserEcho