You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently users can view all machine IDs even if they should not have access to them. Although machines are protected with passwords, this still exposes metadata that should not be exposed, leaking information (though hopefully your users are not your adversaries!)
This also applies to the groups tab in the rustdesk app.
Describe the environment
Not relevant, but docker compose, latest
How to Reproduce the bug
Steps to reproduce the behavior:
create a normal non-admin user
browse devices page, see all devices listed
Expected behavior
only devices for that individual user should be listed if they are not an admin
Additional context
N/A
Notes
Please write in english only. If you provide some images in different languages, you're required to write a translation in english.
In any case, NEVER put here the content if your id_ed25519 file
The text was updated successfully, but these errors were encountered:
Describe the bug
Currently users can view all machine IDs even if they should not have access to them. Although machines are protected with passwords, this still exposes metadata that should not be exposed, leaking information (though hopefully your users are not your adversaries!)
This also applies to the groups tab in the rustdesk app.
Describe the environment
Not relevant, but docker compose, latest
How to Reproduce the bug
Steps to reproduce the behavior:
Expected behavior
only devices for that individual user should be listed if they are not an admin
Additional context
N/A
Notes
id_ed25519
fileThe text was updated successfully, but these errors were encountered: