CVE-2022-2221

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8.

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@devolutions.net

Published

2022-06-27

Last modified

2024-08-03

Weaknesses

CWE-200, CWE-522

Affected products

• Remote Desktop Manager (Devolutions)

References

• https://devolutions.net/security/advisories/DEVO-2022-0004