RustDesk Server Pro Cryptographic Vulnerability Allowing Retrieval of Sensitive Data

A vulnerability in RustDesk Server Pro versions through 1.7.5 on Windows, macOS, and Linux allows the retrieval of embedded sensitive data due to the use of a broken or risky cryptographic algorithm. This issue arises in the application's configuration export and generation routines, particularly within the web console export modules.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive embedded data.

Reproduction

The vulnerability can be reproduced by exporting configuration data through the RustDesk Server Pro web console. The exported data will contain sensitive information that should not be accessible due to the application's cryptographic protections.