Vulnerability · Published Nov 1, 2022 · Assigned by DEVOLUTIONS
CVE-2022-3781
Medium 6.5
In plain English
A medium-severity security flaw in Devolutions Server from Devolutions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Official description
Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote Desktop Manager 2022.2.26 and prior versions. Devolutions Server 2022.3.1 and prior versions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | 0 – through 2022.2.26 |
| Devolutions | Devolutions Server | 0 – through 2022.3.1 |
Weakness: CWE-311 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N