CVE-2022-3781

—

CVSS 3.1

6.5 medium

EPSS

<1%p39

Published

Nov 1, 2022 (Nov 1, 2022)

Modified

Jun 17, 2026

Description

Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote Desktop Manager 2022.2.26 and prior versions. Devolutions Server 2022.3.1 and prior versions.

Vendors: devolutions
Products: devolutions server, remote desktop manager
Weakness: CWE-311, CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.