CVE-2022-3780

2022-11-0118:22:29

CWE-284

DEVOLUTIONS

www.cve.org

mysql

remote desktop manager

unauthorized access

0.002 Low

EPSS

Percentile

51.4%

JSON

Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data.

This issue affects :
Remote Desktop Manager 2022.3.7 and prior versions.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Remote Desktop Manager",
    "vendor": "Devolutions",
    "versions": [
      {
        "lessThanOrEqual": "2022.3.7",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

devolutions.net/security/advisories/DEVO-2022-0008

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for CVELIST:CVE-2022-3780