1. Home
  2. CVE Database
  3. CVE-2022-3781
MEDIUM · 6.5

CVE-2022-3781

Dashlane password and Keepass Server password in My Account Settings  are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3...

Vulnerability Description

Dashlane password and Keepass Server password in My Account Settings  are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote Desktop Manager 2022.2.26 and prior versions. Devolutions Server 2022.3.1 and prior versions.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DevolutionsDevolutions Server< 2022.3.2
DevolutionsRemote Desktop Manager< 2022.2.27

Related Weaknesses (CWE)

CWE-522CWE-311

References

FAQ

What is CVE-2022-3781?

CVE-2022-3781 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Dashlane password and Keepass Server password in My Account Settings  are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3...

How severe is CVE-2022-3781?

CVE-2022-3781 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-3781?

Check the references section above for vendor advisories and patch information. Affected products include: Devolutions Devolutions Server, Devolutions Remote Desktop Manager.