CVE-2022-3781 — Devolutions / Remote Desktop Manager

Description (CNA)

Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote Desktop Manager 2022.2.26 and prior versions. Devolutions Server 2022.3.1 and prior versions.

Affected (CNA)

Vendor / product	Versions
Devolutions / Remote Desktop Manager	affected 0 through 2022.2.26
Devolutions / Devolutions Server	affected 0 through 2022.3.1

CWE

CWE-311

References

https://devolutions.net/security/advisories/DEVO-2022-0009

ADP enrichment

CVE

No English description supplied.

https://devolutions.net/security/advisories/DEVO-2022-0009

CISA-ADP

No English description supplied.

No references supplied.