Remote Desktop Connection product: security breaching bug by RonGiroir

Active

Type:	Bug
ID:	763279
Opened:	9/18/2012 6:24:06 AM
Access Restriction:	Public

Workaround(s)

view

User(s) can reproduce this bug

We have a Windows 2003 server and dozens or clients, (Windows 7), that log on to it. We've setup automatic login shortcuts on the clients to easily connect them and log them on to the server. These logins are typical non-administrator type privileged accounts.
The problem occurs when I, using a fresh/new RDC (remote desktop connection) session, connects and logs in using an administrator user account. The administrator credentials are overwritten to the saved automatic login shortcuts created for non-admin type logins.
This occurs even though I save nothing during the RDC session – RDC automatically overwrites the existing auto login shortcut’s credential with the new (unsaved) credential. Of course, it should not do this, and I can even prove this to you online remotely. Please call me at 225-359-2449. I am Ron Giroir, Systems Analyst.

Details (expand)

Blend

Blend 1 SP1 (1.0.2017.0)

Bug

0 attachments

Posted by Microsoft on 9/20/2012 at 3:58 AM

Thanks for your feedback.

We are rerouting this issue to the appropriate group within the Microsoft Visual Studio Connect Support Team for triage and resolution. These specialized experts will follow-up with your issue.

Posted by Microsoft on 9/19/2012 at 8:00 PM

Thank you for your feedback, we are currently reviewing the issue you have submitted. If this issue is urgent, please contact support directly(http://support.microsoft.com)

Microsoft