rustdesk-server-pro
rustdesk-server-pro copied to clipboard
Information Disclosure
In the Rust windows client, user is able to see ALL devices in the icon with two heads (groups icon on Web Console).
However, on the Web Console, the user is only able to see the devices they are signed into and devices that are in groups that are shared with the user.
The Rust windows client should only show the devices the user is logged into to match the Web Console behaviour.
Clicking on the user's name shows only the devices the user is signed into (this is the expected behaviour which matches the Web Console "devices" list). When the user's name is not selected, it shows ALL devices on the server (including devices the user is not signed into).